Edit tour

Windows Analysis Report
https://www.mylincolnportal.com/customer/public/migration-help

Overview

General Information

Sample URL:	https://www.mylincolnportal.com/customer/public/migration-help
Analysis ID:	1641994
Infos:

Detection

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

Yara detected Powershell download and execute

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML body contains password input but no form action

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6960 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5608 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1968,i,1873803545548113364,18203454594337139115,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=1996 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7448 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1968,i,1873803545548113364,18203454594337139115,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3200 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7672 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.mylincolnportal.com/customer/public/migration-help" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_115	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security

HTTP traffic detected: POST /lfg/main/2/i.gif HTTP/1.1Host: datacloud.tealiumiq.comConnection: keep-aliveContent-Length: 3567sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryjaAiKOgBJLBpfZSlsec-ch-ua-mobile: ?0Accept: */*Origin: https://www.mylincolnportal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.mylincolnportal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: chromecache_120.2.dr	String found in binary or memory: http://consent.trustarc.com/noticemsg?
Source: chromecache_121.2.dr	String found in binary or memory: https://admin.mylincolnportal.com/
Source: chromecache_121.2.dr	String found in binary or memory: https://admin.np-mylincolnportal.com/
Source: chromecache_116.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_120.2.dr	String found in binary or memory: https://api-js-log.trustarc.com/error
Source: chromecache_116.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_120.2.dr	String found in binary or memory: https://consent-pref.trustarc.com?type=lincolnfinancialgroup&layout=gdpr
Source: chromecache_120.2.dr	String found in binary or memory: https://consent.trustarc.com/
Source: chromecache_121.2.dr	String found in binary or memory: https://consent.trustarc.com/asset/notice.js/v/v1.7-289
Source: chromecache_120.2.dr	String found in binary or memory: https://consent.trustarc.com/bannermsg?
Source: chromecache_120.2.dr	String found in binary or memory: https://consent.trustarc.com/get?name=SourceSansPro-Regular.eot)
Source: chromecache_120.2.dr	String found in binary or memory: https://consent.trustarc.com/get?name=SourceSansPro-Regular.otf)
Source: chromecache_120.2.dr	String found in binary or memory: https://consent.trustarc.com/get?name=SourceSansPro-Regular.ttf)
Source: chromecache_120.2.dr	String found in binary or memory: https://consent.trustarc.com/get?name=SourceSansPro-Regular.woff)
Source: chromecache_120.2.dr	String found in binary or memory: https://consent.trustarc.com/log
Source: chromecache_125.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Roboto
Source: chromecache_125.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_125.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_111.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotocondensed/v27/ieVW2ZhZI2eCN5jzbjEETS9weq8-19ehAyvMum7nfDB64RgK1X1p
Source: chromecache_111.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotocondensed/v27/ieVW2ZhZI2eCN5jzbjEETS9weq8-19ehAyvMum7nfDB64RgK1X5p
Source: chromecache_111.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotocondensed/v27/ieVW2ZhZI2eCN5jzbjEETS9weq8-19ehAyvMum7nfDB64RgK1XBp
Source: chromecache_111.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotocondensed/v27/ieVW2ZhZI2eCN5jzbjEETS9weq8-19ehAyvMum7nfDB64RgK1XFp
Source: chromecache_111.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotocondensed/v27/ieVW2ZhZI2eCN5jzbjEETS9weq8-19ehAyvMum7nfDB64RgK1XJp
Source: chromecache_111.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotocondensed/v27/ieVW2ZhZI2eCN5jzbjEETS9weq8-19ehAyvMum7nfDB64RgK1XNp
Source: chromecache_111.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotocondensed/v27/ieVW2ZhZI2eCN5jzbjEETS9weq8-19ehAyvMum7nfDB64RgK1Xpp
Source: chromecache_111.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotocondensed/v27/ieVo2ZhZI2eCN5jzbjEETS9weq8-_d6T_POl0fRJeyWyosBA5Xxx
Source: chromecache_111.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotocondensed/v27/ieVo2ZhZI2eCN5jzbjEETS9weq8-_d6T_POl0fRJeyWyosBB5Xxx
Source: chromecache_111.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotocondensed/v27/ieVo2ZhZI2eCN5jzbjEETS9weq8-_d6T_POl0fRJeyWyosBC5Xxx
Source: chromecache_111.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotocondensed/v27/ieVo2ZhZI2eCN5jzbjEETS9weq8-_d6T_POl0fRJeyWyosBD5Xxx
Source: chromecache_111.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotocondensed/v27/ieVo2ZhZI2eCN5jzbjEETS9weq8-_d6T_POl0fRJeyWyosBK5Xxx
Source: chromecache_111.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotocondensed/v27/ieVo2ZhZI2eCN5jzbjEETS9weq8-_d6T_POl0fRJeyWyosBN5Xxx
Source: chromecache_111.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotocondensed/v27/ieVo2ZhZI2eCN5jzbjEETS9weq8-_d6T_POl0fRJeyWyosBO5Xw.
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKcQ72j00.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKcg72j00.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKcw72j00.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKew72j00.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfA72j00.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3js2yNL4U.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jsGyN.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jtGyNL4U.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jvGyNL4U.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jvWyNL4U.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jvmyNL4U.woff2)
Source: chromecache_115.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_121.2.dr	String found in binary or memory: https://mantine.dev/theming/colors/#primary-color
Source: chromecache_121.2.dr	String found in binary or memory: https://marketingmedia.lfg.com/lfg/DOCS/lfd/emailMarketing/2020/GP/accommodation_toolkit_01/story_ht
Source: chromecache_116.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_116.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_121.2.dr	String found in binary or memory: https://players.brightcove.net/1134849171001/KW4KiINzkI_default/index.html?videoId=6306802973112
Source: chromecache_121.2.dr	String found in binary or memory: https://players.brightcove.net/1134849171001/default_default/index.html?videoId=5811829006001
Source: chromecache_121.2.dr	String found in binary or memory: https://players.brightcove.net/1134849171001/default_default/index.html?videoId=6257960955001
Source: chromecache_116.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_116.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_125.2.dr	String found in binary or memory: https://tags.tiqcdn.com/utag/lfg/mlp/
Source: chromecache_116.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_116.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_116.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_116.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_116.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_116.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_121.2.dr	String found in binary or memory: https://www.lincolnfinancial.com/public/general/legal/consentforelectronicsignature
Source: chromecache_121.2.dr	String found in binary or memory: https://www.lincolnfinancial.com/public/general/legal/consentforelectronictransmissions
Source: chromecache_121.2.dr	String found in binary or memory: https://www.lincolnfinancial.com/public/general/legal/terms
Source: chromecache_121.2.dr	String found in binary or memory: https://www.lincolnfinancial.com/public/general/legal/twofactorauthenticationtermsandconditions
Source: chromecache_120.2.dr	String found in binary or memory: https://www.lincolnfinancial.com/public/general/privacy
Source: chromecache_113.2.dr	String found in binary or memory: https://www.lincolnfinancial.com/public/general/privacy/onlineprivacypolicy
Source: chromecache_121.2.dr	String found in binary or memory: https://www.lincolnfinancial.com/public/individuals
Source: chromecache_116.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_121.2.dr	String found in binary or memory: https://www.mylincolnportal.com
Source: chromecache_121.2.dr	String found in binary or memory: https://www.mylincolnportal.com/static-docs/LLAC

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58065
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58061
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58062
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 58055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58078
Source: unknown	Network traffic detected: HTTP traffic on port 58061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 58074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58055
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 58063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 142.250.186.164:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.73.252.86:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.73.252.86:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.73.252.86:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.116:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.66.122.97:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.66.122.97:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.66.122.97:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.66.122.78:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.13.84:443 -> 192.168.2.5:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.73.252.86:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.158.240.171:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.247.243.39:443 -> 192.168.2.5:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.158.240.171:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.247.243.29:443 -> 192.168.2.5:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.247.243.29:443 -> 192.168.2.5:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.236.93:443 -> 192.168.2.5:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.236.95:443 -> 192.168.2.5:49774 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6960_325625657

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6960_325625657

Jump to behavior

Source: classification engine

Classification label: mal48.evad.win@25/42@35/15

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1968,i,1873803545548113364,18203454594337139115,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=1996 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1968,i,1873803545548113364,18203454594337139115,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3200 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.mylincolnportal.com/customer/public/migration-help"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1968,i,1873803545548113364,18203454594337139115,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=1996 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1968,i,1873803545548113364,18203454594337139115,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3200 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: dropped/chromecache_115, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Extra Window Memory Injection	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.mylincolnportal.com/customer/public/migration-help	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://admin.mylincolnportal.com/	0%	Avira URL Cloud	safe
https://admin.np-mylincolnportal.com/	0%	Avira URL Cloud	safe
https://marketingmedia.lfg.com/lfg/DOCS/lfd/emailMarketing/2020/GP/accommodation_toolkit_01/story_ht	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.mylincolnportal.com	184.73.252.86	true	false	high
consent-pref.trustarc.com	52.222.236.93	true	false	high
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false	high
cdn.lrkt-in.com	104.21.13.84	true	false	high
js-agent.newrelic.com	162.247.243.39	true	false	high
www.google.com	142.250.186.164	true	false	high
datacloud.tealiumiq.com	18.158.240.171	true	false	high
dzfq4ouujrxm8.cloudfront.net	13.33.187.116	true	false	high
consent.trustarc.com	18.66.122.97	true	false	high
15.164.165.52.in-addr.arpa	unknown	unknown	false	high
tags.tiqcdn.com	unknown	unknown	false	high
bam.nr-data.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://bam.nr-data.net/events/1/21d62ec129?a=373156804&sa=1&v=1184.ab39b52&t=Unnamed%20Transaction&rst=11734&ck=1&ref=https://www.mylincolnportal.com/customer/public/migration-help	false	high
https://www.mylincolnportal.com/favicon.ico	false	high
https://consent.trustarc.com/log?domain=lincolnfinancialgroup.com&country=us&state=&behavior=implied&session=56c7fcdc-0924-4214-bcd4-c6bcdfacbc66&userType=NEW&c=0d07&referer=https://www.mylincolnportal.com&language=en	false	high
https://cdn.lrkt-in.com/logger-1.min.js	false	high
https://www.mylincolnportal.com/customer/transformed.8ee4cbfb93a5e1e20864.js	false	high
https://www.mylincolnportal.com/mlp-ui-service/services/v1/notifications/active?functionalArea=LOGIN	false	high
https://tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=lfg/mlp/202412191235&cb=1742316717746	false	high
https://consent.trustarc.com/notice?domain=lincolnfinancialgroup.com&c=teconsent&js=nj&noticeType=bb&gtm=1&text=true&pcookie&cookieLink=https%3A%2F%2Fwww.lincolnfinancial.com%2Fpublic%2Fgeneral%2Fprivacy%2Fonlineprivacypolicy	false	high
https://bam.nr-data.net/1/21d62ec129?a=373156804&sa=1&v=1184.ab39b52&t=Unnamed%20Transaction&rst=11070&ck=1&ref=https://www.mylincolnportal.com/customer/public/migration-help&be=1093&fe=10334&dc=7737&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1742316708833,%22n%22:0,%22f%22:7,%22dn%22:51,%22dne%22:71,%22c%22:71,%22s%22:72,%22ce%22:684,%22rq%22:684,%22rp%22:991,%22rpe%22:1093,%22dl%22:995,%22di%22:3107,%22ds%22:7737,%22de%22:7738,%22dc%22:10333,%22l%22:10334,%22le%22:10335%7D,%22navigation%22:%7B%7D%7D&fp=4892&fcp=4892&jsonp=NREUM.setToken	false	high
https://tags.tiqcdn.com/utag/lfg/mlp/prod/utag.js	false	high
https://consent-pref.trustarc.com/defaultconsentmanager/optin?type=lincolnfinancialgroup&layout=gdpr&site=lincolnfinancialgroup.com&locale=en&behavior=implied&country=us&category=2&userType=NEW&session=56c7fcdc-0924-4214-bcd4-c6bcdfacbc66	false	high
https://bam.nr-data.net/events/1/21d62ec129?a=373156804&sa=1&v=1184.ab39b52&t=Unnamed%20Transaction&rst=44062&ck=1&ref=https://www.mylincolnportal.com/customer/public/login	false	high
https://bam.nr-data.net/jserrors/1/21d62ec129?a=373156804&sa=1&v=1184.ab39b52&t=Unnamed%20Transaction&rst=71070&ck=1&ref=https://www.mylincolnportal.com/customer/public/login&ri=%7B%22customer-ui%22:%22undefined-undefined%22%7D&xhr=%5B%7B%22params%22:%7B%22method%22:%22GET%22,%22host%22:%22www.mylincolnportal.com:443%22,%22pathname%22:%22/portal-status%22,%22status%22:200%7D,%22metrics%22:%7B%22count%22:1,%22rxSize%22:%7B%22t%22:63%7D,%22duration%22:%7B%22t%22:718%7D,%22cbTime%22:%7B%22t%22:0%7D,%22time%22:%7B%22t%22:7790%7D%7D%7D,%7B%22params%22:%7B%22method%22:%22post%22,%22host%22:%22datacloud.tealiumiq.com:443%22,%22pathname%22:%22/lfg/main/2/i.gif%22,%22status%22:200%7D,%22metrics%22:%7B%22count%22:1,%22rxSize%22:%7B%22t%22:43%7D,%22duration%22:%7B%22t%22:1245%7D,%22cbTime%22:%7B%22t%22:0%7D,%22time%22:%7B%22t%22:8923%7D%7D%7D,%7B%22params%22:%7B%22method%22:%22POST%22,%22host%22:%22bam.nr-data.net:443%22,%22pathname%22:%22/events/1/21d62ec129%22,%22status%22:200%7D,%22metrics%22:%7B%22count%22:3,%22txSize%22:%7B%22t%22:843,%22min%22:200,%22max%22:442,%22sos%22:275765,%22c%22:3%7D,%22rxSize%22:%7B%22t%22:72,%22min%22:24,%22max%22:24,%22sos%22:1728,%22c%22:3%7D,%22duration%22:%7B%22t%22:2019,%22min%22:632,%22max%22:713,%22sos%22:1362069,%22c%22:3%7D,%22cbTime%22:%7B%22t%22:0,%22min%22:0,%22max%22:0,%22sos%22:0,%22c%22:3%7D,%22time%22:%7B%22t%22:76879,%22min%22:11734,%22max%22:44063,%22sos%22:2523685449,%22c%22:3%7D%7D%7D,%7B%22params%22:%7B%22method%22:%22GET%22,%22host%22:%22www.mylincolnportal.com:443%22,%22pathname%22:%22/mlp-ui-service/services/v1/notifications/active%22,%22status%22:200%7D,%22metrics%22:%7B%22count%22:1,%22rxSize%22:%7B%22t%22:650%7D,%22duration%22:%7B%22t%22:714%7D,%22cbTime%22:%7B%22t%22:0%7D,%22time%22:%7B%22t%22:44022%7D%7D%7D%5D	false	high
https://www.mylincolnportal.com/customer/public/login?employee=true	false	high
https://tags.tiqcdn.com/utag/lfg/mlp/prod/utag.112.js?utv=ut4.51.202410190204	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false	high
https://consent.trustarc.com/get?name=SourceSansPro-Regular.ttf	false	high
https://consent.trustarc.com/asset/notice.js/v/v1.7-675	false	high
https://www.mylincolnportal.com/portal-status	false	high
https://consent.trustarc.com/bannermsg?action=accepts&domain=lincolnfinancialgroup.com&behavior=implied&country=us&language=en&rand=0.005076862849370034&session=56c7fcdc-0924-4214-bcd4-c6bcdfacbc66&userType=NEW&referer=https://www.mylincolnportal.com	false	high
https://bam.nr-data.net/events/1/21d62ec129?a=373156804&sa=1&v=1184.ab39b52&t=Unnamed%20Transaction&rst=21081&ck=1&ref=https://www.mylincolnportal.com/customer/public/migration-help	false	high
https://consent.trustarc.com/get?name=crossdomain.html&domain=lincolnfinancialgroup.com	false	high
https://datacloud.tealiumiq.com/lfg/main/2/i.gif	false	high
https://js-agent.newrelic.com/nr-spa-1184.min.js	false	high
https://www.mylincolnportal.com/customer/main.css	false	high
https://consent.trustarc.com/bannermsg?action=views&domain=lincolnfinancialgroup.com&behavior=implied&country=us&language=en&rand=0.004297524901565319&session=56c7fcdc-0924-4214-bcd4-c6bcdfacbc66&userType=NEW&referer=https://www.mylincolnportal.com	false	high
https://www.mylincolnportal.com/customer/public/migration-help	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.lincolnfinancial.com/public/general/legal/terms	chromecache_121.2.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_116.2.dr	false		high
https://www.lincolnfinancial.com/public/individuals	chromecache_121.2.dr	false		high
https://mantine.dev/theming/colors/#primary-color	chromecache_121.2.dr	false		high
https://www.lincolnfinancial.com/public/general/legal/twofactorauthenticationtermsandconditions	chromecache_121.2.dr	false		high
https://players.brightcove.net/1134849171001/default_default/index.html?videoId=5811829006001	chromecache_121.2.dr	false		high
https://consent.trustarc.com/get?name=SourceSansPro-Regular.ttf)	chromecache_120.2.dr	false		high
https://www.lincolnfinancial.com/public/general/legal/consentforelectronictransmissions	chromecache_121.2.dr	false		high
https://www.google.com	chromecache_116.2.dr	false		high
https://consent.trustarc.com/asset/notice.js/v/v1.7-289	chromecache_121.2.dr	false		high
https://www.lincolnfinancial.com/public/general/legal/consentforelectronicsignature	chromecache_121.2.dr	false		high
https://www.lincolnfinancial.com/public/general/privacy	chromecache_120.2.dr	false		high
https://www.mylincolnportal.com/static-docs/LLAC	chromecache_121.2.dr	false		high
https://api-js-log.trustarc.com/error	chromecache_120.2.dr	false		high
https://consent.trustarc.com/get?name=SourceSansPro-Regular.otf)	chromecache_120.2.dr	false		high
https://www.lincolnfinancial.com/public/general/privacy/onlineprivacypolicy	chromecache_113.2.dr	false		high
https://admin.mylincolnportal.com/	chromecache_121.2.dr	false	Avira URL Cloud: safe	unknown
https://www.mylincolnportal.com	chromecache_121.2.dr	false		high
https://players.brightcove.net/1134849171001/default_default/index.html?videoId=6257960955001	chromecache_121.2.dr	false		high
https://consent.trustarc.com/get?name=SourceSansPro-Regular.woff)	chromecache_120.2.dr	false		high
https://consent.trustarc.com/	chromecache_120.2.dr	false		high
http://consent.trustarc.com/noticemsg?	chromecache_120.2.dr	false		high
https://tags.tiqcdn.com/utag/lfg/mlp/	chromecache_125.2.dr	false		high
https://players.brightcove.net/1134849171001/KW4KiINzkI_default/index.html?videoId=6306802973112	chromecache_121.2.dr	false		high
https://consent.trustarc.com/bannermsg?	chromecache_120.2.dr	false		high
https://cct.google/taggy/agent.js	chromecache_116.2.dr	false		high
https://admin.np-mylincolnportal.com/	chromecache_121.2.dr	false	Avira URL Cloud: safe	unknown
https://td.doubleclick.net	chromecache_116.2.dr	false		high
https://consent-pref.trustarc.com?type=lincolnfinancialgroup&layout=gdpr	chromecache_120.2.dr	false		high
https://www.merchant-center-analytics.goog	chromecache_116.2.dr	false		high
https://consent.trustarc.com/get?name=SourceSansPro-Regular.eot)	chromecache_120.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_116.2.dr	false		high
https://github.com/js-cookie/js-cookie	chromecache_115.2.dr	false		high
https://consent.trustarc.com/log	chromecache_120.2.dr	false		high
https://adservice.google.com/pagead/regclk?	chromecache_116.2.dr	false		high
https://marketingmedia.lfg.com/lfg/DOCS/lfd/emailMarketing/2020/GP/accommodation_toolkit_01/story_ht	chromecache_121.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
3.69.95.201	unknown	United States	16509	AMAZON-02US	false
13.33.187.116	dzfq4ouujrxm8.cloudfront.net	United States	16509	AMAZON-02US	false
184.73.252.86	www.mylincolnportal.com	United States	14618	AMAZON-AESUS	false
18.66.122.78	unknown	United States	3	MIT-GATEWAYSUS	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false
104.21.13.84	cdn.lrkt-in.com	United States	13335	CLOUDFLARENETUS	false
18.66.122.97	consent.trustarc.com	United States	3	MIT-GATEWAYSUS	false
142.250.185.68	unknown	United States	15169	GOOGLEUS	false
54.236.223.74	unknown	United States	14618	AMAZON-AESUS	false
52.222.236.93	consent-pref.trustarc.com	United States	16509	AMAZON-02US	false
18.158.240.171	datacloud.tealiumiq.com	United States	16509	AMAZON-02US	false
52.222.236.95	unknown	United States	16509	AMAZON-02US	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1641994
Start date and time:	2025-03-18 17:50:54 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.mylincolnportal.com/customer/public/migration-help
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.evad.win@25/42@35/15
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, BackgroundTransferHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.195, 216.58.212.142, 172.217.16.206, 66.102.1.84, 142.250.184.206, 172.217.18.14, 172.217.18.3, 142.250.185.234, 216.58.206.40, 199.232.210.172, 142.250.186.174, 216.58.206.46, 142.250.185.206, 142.250.186.142, 217.20.57.36, 172.217.18.10, 142.250.186.138, 142.250.186.170, 172.217.18.106, 142.250.186.106, 142.250.185.106, 172.217.23.106, 142.250.185.138, 142.250.184.202, 142.250.186.74, 216.58.206.74, 142.250.185.170, 142.250.184.234, 142.250.185.202, 142.250.186.42, 142.250.185.74, 142.250.184.238, 142.250.185.195, 142.250.186.131, 34.104.35.123, 23.60.203.209, 172.202.163.200, 20.31.169.57, 150.171.28.10, 2.19.96.49, 52.165.164.15, 52.149.20.212
Excluded domains from analysis (whitelisted): www.bing.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, g.bing.com, arc.msn.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, redirector.gvt1.com, edgedl.me.gvt1.com, www.googletagmanager.com, update.googleapis.com, clients.l.google.com, www.google-analytics.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.mylincolnportal.com/customer/public/migration-help

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5461
Entropy (8bit):	5.592499965604054
Encrypted:	false
SSDEEP:	96:qYgEaN2yE6YgEaN2yUFZdYgEaN2yXYgEaN2yX31YgEaN2ymYgEaN2yBJc+uxYgEh:fON2yEPON2ytON2yoON2yX3yON2yzON3
MD5:	F640504897D4A3EA969C40C1FD70D388
SHA1:	5CBBAFA7A2D42D2B634DFC3A58FA4E752E84F4D3
SHA-256:	93726E1F3F0256D967E3458F01E1265C65D7290618AB4497F90D64EC66BFD95B
SHA-512:	1D7A26CBF25B937476FE43476CA47254A1D93B1DBFDC357A2411531D556BEB0F610D2097D41EE58F9F57EF0966996E45146B974ED83816EEDB81A55C340ED625
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Roboto+Condensed:ital@0;1&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto Condensed';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/robotocondensed/v27/ieVW2ZhZI2eCN5jzbjEETS9weq8-19ehAyvMum7nfDB64RgK1XNpLOSK.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto Condensed';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/robotocondensed/v27/ieVW2ZhZI2eCN5jzbjEETS9weq8-19ehAyvMum7nfDB64RgK1XppLOSK.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext */.@font-face {. font-family: 'Roboto Condensed';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/robotocondensed/v27/ieVW2ZhZI2eCN5jzbjEETS9weq8-19ehAyvMum7nfDB64RgK1XJpLOSK.woff2) format('woff2');. unicode-range: U+1F00-1FFF

Source: https://www.mylincolnportal.com/customer/public/migration-help	HTTP Parser: No favicon
Source: https://www.mylincolnportal.com/customer/public/migration-help	HTTP Parser: No favicon
Source: https://www.mylincolnportal.com/customer/public/migration-help	HTTP Parser: No favicon
Source: https://www.mylincolnportal.com/customer/public/migration-help	HTTP Parser: No favicon
Source: https://www.mylincolnportal.com/customer/public/login?employee=true	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10

Source: chromecache_121.2.dr	String found in binary or memory: nico, visite www.yahoo.com o www.gmail.com. Su direcci equals www.yahoo.com (Yahoo)
Source: chromecache_116.2.dr	String found in binary or memory: return f}GG.K="internal.enableAutoEventOnTimer";var bc=wa(["data-gtm-yt-inspected-"]),IG=["www.youtube.com","www.youtube-nocookie.com"],JG,KG=!1; equals www.youtube.com (Youtube)
Source: chromecache_121.2.dr	String found in binary or memory: s configuration.",companyCodeError:"Invalid company access code.",companyCodeInstructions:"Enter your company code and validate to continue registration",companyCodeLabel:"Company Code",companyCodeToolTip:"For company code assistance, contact your HR or benefits representative. For further assistance call 1-800-431-2958.",employeeCompanyCodeError:"Employees use your company code to register on www.LincolnFinancial.com",fieldRequired:"This field is required.",validateButton:"Validate",validationServiceError:"The system has experienced an unexpected error. Your Company Code cannot be validated at this time. Please try again.",agreeToPrivacyStatement:"I have read and agree to the following:",cancelButtonLabel:"Cancel",cancelModalBodyText:"If you cancel now, the information you entered will be lost and your user profile will not be created. As a result, you will not be able to login to the secured site. If you would like to leave this page, please select OK. If you wish to return to creating your user profile, please select Cancel.",cancelModalHeading:"Are you sure?",closeButtonText:"Close",duplicateEmailError:"Email address already in use.",duplicateUserNameError:"Username is unavailable.",emailErrorMessage:"Email address is not valid.",emailToolTip:"Please enter an email address you can access when you are away from work, so we may send you information about your account. If you need an email address, please visit www.yahoo.com or www.gmail.com. Your email address will not be shared or used for commercial purposes.",employerNameLabel:"Employer Name",firstName:"First Name",firstNameErrormessage:"First name is not valid.",hide:"Hide",lastName:"Last Name",lastnameErrorMessage:"Last name is not valid.",loginInfoHeading:"Login Information",nonApprovedCountryError:"This country is not approved for Two Factor Authentication. Please contact technical assistance.",okButton:"OK",passwordEqualMessage:"Passwords must match.",passwordErrorMessage:"Enter a valid password",personalInfoHeading:"Personal Information",phoneErrorMessage:"This phone number is not valid.",phoneNumber:"Preferred Phone Number",preferredEmailAddress:"Preferred Email Address",privacyStatementAgreeRequired:"You must agree to the Privacy Statement and Web Agreement to continue.",pwdLabel:"Password",pwdusernameErrorMessage:"Username and Password cannot be the same.",reenterPwdLabel:"Re-enter Password",registerButtonLabel:"Register",registerServiceError:"The system has experienced an unexpected error. Your registration cannot be processed at this time. Please try again.",show:"Show",termsAndConditionsHeader:"View Privacy Statement and Web Agreement",usernameErrormessage:"Enter a valid username",usernameEmailErrorMessage:"The username or email you have entered is already associated to an account.",usernameHelperText:AMe,usernameLabel:"Username",usernameToolTip:["The username field accepts the following characters"," equals www.yahoo.com (Yahoo)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.mylincolnportal.com
Source: global traffic	DNS traffic detected: DNS query: tags.tiqcdn.com
Source: global traffic	DNS traffic detected: DNS query: consent.trustarc.com
Source: global traffic	DNS traffic detected: DNS query: cdn.lrkt-in.com
Source: global traffic	DNS traffic detected: DNS query: datacloud.tealiumiq.com
Source: global traffic	DNS traffic detected: DNS query: js-agent.newrelic.com
Source: global traffic	DNS traffic detected: DNS query: bam.nr-data.net
Source: global traffic	DNS traffic detected: DNS query: consent-pref.trustarc.com
Source: global traffic	DNS traffic detected: DNS query: 15.164.165.52.in-addr.arpa

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 18, 2025 17:51:43.973779917 CET	53	60409	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:43.975966930 CET	53	60750	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:45.287715912 CET	53	61107	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:48.190226078 CET	49442	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:51:48.190362930 CET	56401	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:51:48.197096109 CET	53	49442	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:48.197324991 CET	53	56401	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:49.360488892 CET	65296	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:51:49.361260891 CET	56362	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:51:49.395360947 CET	53	56362	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:49.396987915 CET	53	65296	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:50.353813887 CET	63569	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:51:50.353934050 CET	55932	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:51:50.361924887 CET	53	55932	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:50.361968040 CET	53	63569	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:50.442343950 CET	53	51504	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:51.882185936 CET	51832	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:51:51.882338047 CET	54479	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:51:51.891515017 CET	53	54479	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:51.909702063 CET	53	51832	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:53.031097889 CET	61452	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:51:53.031373978 CET	64793	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:51:53.038408995 CET	53	64793	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:53.039742947 CET	53	61452	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:54.101541996 CET	58245	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:51:54.101684093 CET	64803	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:51:54.108407021 CET	53	64803	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:54.110508919 CET	53	58245	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:56.868284941 CET	54059	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:51:56.868721962 CET	50189	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:51:56.876298904 CET	53	54059	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:56.876430035 CET	53	50189	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:58.252639055 CET	63095	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:51:58.252847910 CET	65427	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:51:58.254199028 CET	53	54174	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:58.260368109 CET	53	63095	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:58.260742903 CET	53	65427	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:58.297513962 CET	50840	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:51:58.298577070 CET	55886	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:51:58.326736927 CET	53	50840	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:58.330432892 CET	53	55886	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:59.500366926 CET	50004	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:51:59.500478983 CET	50119	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:51:59.508040905 CET	53	50119	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:59.526173115 CET	53	50004	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:59.666501999 CET	53	63927	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:59.682408094 CET	55552	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:51:59.682786942 CET	55540	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:51:59.689240932 CET	53	55552	1.1.1.1	192.168.2.5
Mar 18, 2025 17:51:59.690561056 CET	53	55540	1.1.1.1	192.168.2.5
Mar 18, 2025 17:52:00.421046972 CET	59902	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:52:00.421248913 CET	57802	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:52:00.428096056 CET	53	59902	1.1.1.1	192.168.2.5
Mar 18, 2025 17:52:00.428107977 CET	53	57802	1.1.1.1	192.168.2.5
Mar 18, 2025 17:52:01.775924921 CET	56685	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:52:01.776057959 CET	57159	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:52:01.784373999 CET	53	56685	1.1.1.1	192.168.2.5
Mar 18, 2025 17:52:01.787620068 CET	53	57159	1.1.1.1	192.168.2.5
Mar 18, 2025 17:52:02.464898109 CET	53	49517	1.1.1.1	192.168.2.5
Mar 18, 2025 17:52:09.093842030 CET	52953	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:52:09.094136953 CET	61687	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:52:09.101592064 CET	53	61687	1.1.1.1	192.168.2.5
Mar 18, 2025 17:52:09.114135027 CET	53	52953	1.1.1.1	192.168.2.5
Mar 18, 2025 17:52:10.258569002 CET	50036	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:52:10.261482954 CET	63570	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:52:10.266773939 CET	53	50036	1.1.1.1	192.168.2.5
Mar 18, 2025 17:52:10.271162987 CET	53	63570	1.1.1.1	192.168.2.5
Mar 18, 2025 17:52:12.603725910 CET	53	62914	162.159.36.2	192.168.2.5
Mar 18, 2025 17:52:13.092643976 CET	59024	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:52:13.101165056 CET	53	59024	1.1.1.1	192.168.2.5
Mar 18, 2025 17:52:21.198955059 CET	65324	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:52:21.207042933 CET	53	65324	1.1.1.1	192.168.2.5
Mar 18, 2025 17:52:33.320287943 CET	61140	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:52:33.350775003 CET	53	61140	1.1.1.1	192.168.2.5
Mar 18, 2025 17:52:33.395198107 CET	60745	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:52:33.401972055 CET	53	60745	1.1.1.1	192.168.2.5
Mar 18, 2025 17:52:47.775953054 CET	138	138	192.168.2.5	192.168.2.255
Mar 18, 2025 17:52:48.283597946 CET	54840	53	192.168.2.5	1.1.1.1
Mar 18, 2025 17:52:48.290627956 CET	53	54840	1.1.1.1	192.168.2.5

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:51:50 UTC	703	OUT	GET /customer/public/migration-help HTTP/1.1 Host: www.mylincolnportal.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 16:51:50 UTC	976	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 16:51:50 GMT Content-Type: text/html Content-Length: 29537 Connection: close Access-Control-Expose-Headers: mlp-trace-id Last-Modified: Mon, 17 Mar 2025 20:03:22 GMT x-amz-server-side-encryption: aws:kms x-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:us-east-1:588826796381:key/aca7ef27-c35b-43d1-89ca-784474f5f57e Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=0 ETag: "bc2298db7e37fddfec90dfd0e84ab842" X-Cache: Error from cloudfront Via: 1.1 fe7bdd441a6be29f25cf73b102efdd00.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD58-P2 X-Amz-Cf-Id: MYmTYJs8uoYweAXI_8o9_D6u3TuR-tISWy9RxiEuHPr78-f5k2BddQ== mlp-trace-id: 67d9a4a6997ec21acfd3fd64c200ffc7 Content-Security-Policy: frame-ancestors 'self' x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-XSS-Protection: 0
2025-03-18 16:51:50 UTC	16384	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 3c 74 69 74 6c 65 3e 4d 79 20 4c 69 6e 63 6f 6c 6e 20 50 6f 72 74 61 6c 26 72 65 67 3b 20 7c 20 4c 69 6e 63 6f 6c 6e 20 46 69 6e 61 6e 63 69 61 6c 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 41 63 63 65 73 73 20 74 68 65 20 4d 79 20 4c 69 6e 63 6f 6c 6e 20 50 6f 72 74 61 6c 20 61 6e 79 20 74 69 6d 65 20 74 6f 20 63 6f 6e 76 65 6e 69 65 6e 74 6c 79 20 73 75 62 6d 69 74 20 61 20 63 6c 61 69 6d 20 6f 72 20 6c 65 61 76 65 20 72 65 71 75 65 73 74 2c 20 76 69 65 77 20 74 68 65 20 73 74 61 74 75 73 20 6f Data Ascii: <!doctype html><html lang="en"><head><meta charset="UTF-8"/><title>My Lincoln Portal® \| Lincoln Financial</title><meta name="description" content="Access the My Lincoln Portal any time to conveniently submit a claim or leave request, view the status o
2025-03-18 16:51:50 UTC	13153	IN	Data Raw: 61 64 65 72 28 22 6e 65 77 72 65 6c 69 63 22 2c 6e 2e 6e 65 77 72 65 6c 69 63 48 65 61 64 65 72 29 2c 72 3d 21 30 29 2c 6e 2e 74 72 61 63 65 43 6f 6e 74 65 78 74 50 61 72 65 6e 74 48 65 61 64 65 72 26 26 28 65 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 74 72 61 63 65 70 61 72 65 6e 74 22 2c 6e 2e 74 72 61 63 65 43 6f 6e 74 65 78 74 50 61 72 65 6e 74 48 65 61 64 65 72 29 2c 6e 2e 74 72 61 63 65 43 6f 6e 74 65 78 74 53 74 61 74 65 48 65 61 64 65 72 26 26 65 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 74 72 61 63 65 73 74 61 74 65 22 2c 6e 2e 74 72 61 63 65 43 6f 6e 74 65 78 74 53 74 61 74 65 48 65 61 64 65 72 29 2c 72 3d 21 30 29 2c 72 26 26 28 74 68 69 73 2e 64 74 3d 6e 29 7d 7d 29 2c 75 2e 6f 6e 28 22 73 65 6e 64 2d 78 68 72 2d Data Ascii: ader("newrelic",n.newrelicHeader),r=!0),n.traceContextParentHeader&&(e.setRequestHeader("traceparent",n.traceContextParentHeader),n.traceContextStateHeader&&e.setRequestHeader("tracestate",n.traceContextStateHeader),r=!0),r&&(this.dt=n)}}),u.on("send-xhr-

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:51:50 UTC	599	OUT	GET /customer/main.css HTTP/1.1 Host: www.mylincolnportal.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mylincolnportal.com/customer/public/migration-help Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 16:51:50 UTC	982	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 16:51:50 GMT Content-Type: text/css Content-Length: 2224768 Connection: close Access-Control-Expose-Headers: mlp-trace-id Last-Modified: Mon, 17 Mar 2025 20:03:22 GMT x-amz-server-side-encryption: aws:kms x-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:us-east-1:588826796381:key/aca7ef27-c35b-43d1-89ca-784474f5f57e Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=0 ETag: "0f21de483ed5c52e0b44da5c6db74d15" X-Cache: RefreshHit from cloudfront Via: 1.1 dfbb70da951fe29769706870c1e4764a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD58-P2 X-Amz-Cf-Id: KqSS9BzPqWH3PI2p5ONSECE5sPjdrsdiUx1WlGhrA8TJVR6cRADKiA== mlp-trace-id: 67d9a4a6a83a620da17d50edfe02a936 Content-Security-Policy: frame-ancestors 'self' x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-XSS-Protection: 0
2025-03-18 16:51:50 UTC	15737	IN	Data Raw: 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 72 65 61 64 2d 76 69 65 77 2d 2d 64 6f 77 6e 2d 61 72 72 6f 77 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 79 65 61 72 2d 72 65 61 64 2d 76 69 65 77 2d 2d 64 6f 77 6e 2d 61 72 72 6f 77 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6e 61 76 69 67 61 74 69 6f 6e 2d 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 79 65 61 72 2d 72 65 61 64 2d 76 69 65 77 2d 2d 64 6f 77 6e 2d 61 72 72 6f 77 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 63 63 63 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 33 70 78 20 33 70 78 20 30 20 30 3b 63 6f 6e 74 65 6e Data Ascii: .react-datepicker__month-read-view--down-arrow,.react-datepicker__month-year-read-view--down-arrow,.react-datepicker__navigation-icon:before,.react-datepicker__year-read-view--down-arrow{border-color:#ccc;border-style:solid;border-width:3px 3px 0 0;conten
2025-03-18 16:51:50 UTC	16384	IN	Data Raw: 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 74 65 78 74 2d 2d 69 6e 2d 72 61 6e 67 65 3a 6e 6f 74 28 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 64 61 79 2d 2d 69 6e 2d 73 65 6c 65 63 74 69 6e 67 2d 72 61 6e 67 65 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 74 65 78 74 2d 2d 69 6e 2d 73 65 6c 65 63 74 69 6e 67 2d 72 61 6e 67 65 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 71 75 61 72 74 65 72 2d 74 65 78 74 2d 2d 69 6e 2d 73 65 6c 65 63 74 69 6e 67 2d 72 61 6e 67 65 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 79 65 61 72 2d 74 65 78 74 2d 2d 69 6e 2d 73 65 6c 65 63 74 69 6e 67 2d 72 61 6e 67 65 29 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 2d Data Ascii: epicker__month-text--in-range:not(.react-datepicker__day--in-selecting-range,.react-datepicker__month-text--in-selecting-range,.react-datepicker__quarter-text--in-selecting-range,.react-datepicker__year-text--in-selecting-range),.react-datepicker__month--
2025-03-18 16:51:50 UTC	16350	IN	Data Raw: 61 6e 74 69 6e 65 2d 63 6f 6c 6f 72 2d 74 65 61 6c 2d 33 3a 23 36 33 65 36 62 65 3b 2d 2d 6d 61 6e 74 69 6e 65 2d 63 6f 6c 6f 72 2d 74 65 61 6c 2d 34 3a 23 33 38 64 39 61 39 3b 2d 2d 6d 61 6e 74 69 6e 65 2d 63 6f 6c 6f 72 2d 74 65 61 6c 2d 35 3a 23 32 30 63 39 39 37 3b 2d 2d 6d 61 6e 74 69 6e 65 2d 63 6f 6c 6f 72 2d 74 65 61 6c 2d 36 3a 23 31 32 62 38 38 36 3b 2d 2d 6d 61 6e 74 69 6e 65 2d 63 6f 6c 6f 72 2d 74 65 61 6c 2d 37 3a 23 30 63 61 36 37 38 3b 2d 2d 6d 61 6e 74 69 6e 65 2d 63 6f 6c 6f 72 2d 74 65 61 6c 2d 38 3a 23 30 39 39 32 36 38 3b 2d 2d 6d 61 6e 74 69 6e 65 2d 63 6f 6c 6f 72 2d 74 65 61 6c 2d 39 3a 23 30 38 37 66 35 62 3b 2d 2d 6d 61 6e 74 69 6e 65 2d 63 6f 6c 6f 72 2d 67 72 65 65 6e 2d 30 3a 23 65 62 66 62 65 65 3b 2d 2d 6d 61 6e 74 69 6e 65 Data Ascii: antine-color-teal-3:#63e6be;--mantine-color-teal-4:#38d9a9;--mantine-color-teal-5:#20c997;--mantine-color-teal-6:#12b886;--mantine-color-teal-7:#0ca678;--mantine-color-teal-8:#099268;--mantine-color-teal-9:#087f5b;--mantine-color-green-0:#ebfbee;--mantine
2025-03-18 16:51:50 UTC	16384	IN	Data Raw: 2d 63 6f 6c 6f 72 2d 6f 72 61 6e 67 65 2d 36 29 3b 2d 2d 6d 61 6e 74 69 6e 65 2d 63 6f 6c 6f 72 2d 6f 72 61 6e 67 65 2d 6f 75 74 6c 69 6e 65 2d 68 6f 76 65 72 3a 72 67 62 61 28 32 35 33 2c 31 32 36 2c 32 30 2c 2e 30 35 29 7d 2e 6d 5f 64 35 37 30 36 39 62 35 7b 2d 2d 73 63 72 6f 6c 6c 61 72 65 61 2d 73 63 72 6f 6c 6c 62 61 72 2d 73 69 7a 65 3a 63 61 6c 63 28 30 2e 37 35 72 65 6d 2a 76 61 72 28 2d 2d 6d 61 6e 74 69 6e 65 2d 73 63 61 6c 65 29 29 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6d 5f 63 30 37 38 33 66 66 39 7b 73 63 72 6f 6c 6c 62 61 72 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 6f 76 65 72 66 6c Data Ascii: -color-orange-6);--mantine-color-orange-outline-hover:rgba(253,126,20,.05)}.m_d57069b5{--scrollarea-scrollbar-size:calc(0.75rem*var(--mantine-scale));overflow:hidden;position:relative}.m_c0783ff9{scrollbar-width:none;-ms-overflow-style:none;-webkit-overfl
2025-03-18 16:51:50 UTC	16384	IN	Data Raw: 67 2d 74 6f 70 3a 30 7d 2e 6d 5f 36 63 30 31 38 35 37 30 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 69 6e 70 75 74 2d 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 2c 30 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 76 61 72 28 2d 2d 69 6e 70 75 74 2d 6d 61 72 67 69 6e 2d 74 6f 70 2c 30 29 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 2d 2d 69 6e 70 75 74 2d 68 65 69 67 68 74 2d 78 73 3a 63 61 6c 63 28 31 2e 38 37 35 72 65 6d 2a 76 61 72 28 2d 2d 6d 61 6e 74 69 6e 65 2d 73 63 61 6c 65 29 29 3b 2d 2d 69 6e 70 75 74 2d 68 65 69 67 68 74 2d 73 6d 3a 63 61 6c 63 28 32 2e 32 35 72 65 6d 2a 76 61 72 28 2d 2d 6d 61 6e 74 69 6e 65 2d 73 63 61 6c 65 29 29 3b 2d 2d 69 6e 70 75 74 2d 68 65 69 67 68 74 2d 6d 64 3a 63 61 6c 63 28 32 2e 36 32 35 72 65 Data Ascii: g-top:0}.m_6c018570{margin-bottom:var(--input-margin-bottom,0);margin-top:var(--input-margin-top,0);position:relative;--input-height-xs:calc(1.875remvar(--mantine-scale));--input-height-sm:calc(2.25remvar(--mantine-scale));--input-height-md:calc(2.625re
2025-03-18 16:51:50 UTC	16384	IN	Data Raw: 61 6e 74 69 6e 65 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3d 6c 69 67 68 74 5d 29 20 2e 6d 5f 34 38 32 30 34 66 39 62 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6d 61 6e 74 69 6e 65 2d 63 6f 6c 6f 72 2d 67 72 61 79 2d 31 29 7d 3a 77 68 65 72 65 28 5b 64 61 74 61 2d 6d 61 6e 74 69 6e 65 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3d 64 61 72 6b 5d 29 20 2e 6d 5f 34 38 32 30 34 66 39 62 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6d 61 6e 74 69 6e 65 2d 63 6f 6c 6f 72 2d 64 61 72 6b 2d 35 29 7d 2e 6d 5f 62 62 39 63 64 62 61 64 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 73 6c 69 64 65 72 2d 73 69 7a 65 29 3b 69 6e 73 65 74 3a 63 61 6c 63 28 2e 30 36 32 35 72 65 6d 2a 76 61 72 28 2d 2d 6d Data Ascii: antine-color-scheme=light]) .m_48204f9b{background-color:var(--mantine-color-gray-1)}:where([data-mantine-color-scheme=dark]) .m_48204f9b{background-color:var(--mantine-color-dark-5)}.m_bb9cdbad{border-radius:var(--slider-size);inset:calc(.0625rem*var(--m
2025-03-18 16:51:50 UTC	16384	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 2e 6d 5f 32 36 30 36 33 35 36 30 3a 64 69 73 61 62 6c 65 64 7b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7d 3a 77 68 65 72 65 28 5b 64 61 74 61 2d 6d 61 6e 74 69 6e 65 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3d 6c 69 67 68 74 5d 29 20 2e 6d 5f 32 36 30 36 33 35 36 30 3a 64 69 73 61 62 6c 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6d 61 6e 74 69 6e 65 2d 63 6f 6c 6f 72 2d 67 72 61 79 2d 32 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6d 61 6e 74 69 6e 65 2d 63 6f 6c 6f 72 2d 67 72 61 79 2d 33 29 7d 3a 77 68 65 72 65 28 5b 64 61 74 61 2d 6d 61 6e 74 69 6e 65 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3d 64 61 72 6b 5d 29 20 2e 6d 5f 32 36 30 36 33 35 36 30 Data Ascii: ransform:none}.m_26063560:disabled{cursor:not-allowed}:where([data-mantine-color-scheme=light]) .m_26063560:disabled{background-color:var(--mantine-color-gray-2);border-color:var(--mantine-color-gray-3)}:where([data-mantine-color-scheme=dark]) .m_26063560
2025-03-18 16:51:50 UTC	16384	IN	Data Raw: 36 32 35 72 65 6d 2a 76 61 72 28 2d 2d 6d 61 6e 74 69 6e 65 2d 73 63 61 6c 65 29 29 3b 2d 2d 73 65 63 74 69 6f 6e 2d 70 61 64 64 69 6e 67 2d 78 2d 78 6c 3a 63 61 6c 63 28 32 72 65 6d 2a 76 61 72 28 2d 2d 6d 61 6e 74 69 6e 65 2d 73 63 61 6c 65 29 29 3b 2d 2d 73 65 63 74 69 6f 6e 2d 70 61 64 64 69 6e 67 2d 78 2d 63 6f 6d 70 61 63 74 2d 78 73 3a 63 61 6c 63 28 30 2e 34 33 37 35 72 65 6d 2a 76 61 72 28 2d 2d 6d 61 6e 74 69 6e 65 2d 73 63 61 6c 65 29 29 3b 2d 2d 73 65 63 74 69 6f 6e 2d 70 61 64 64 69 6e 67 2d 78 2d 63 6f 6d 70 61 63 74 2d 73 6d 3a 63 61 6c 63 28 30 2e 35 72 65 6d 2a 76 61 72 28 2d 2d 6d 61 6e 74 69 6e 65 2d 73 63 61 6c 65 29 29 3b 2d 2d 73 65 63 74 69 6f 6e 2d 70 61 64 64 69 6e 67 2d 78 2d 63 6f 6d 70 61 63 74 2d 6d 64 3a 63 61 6c 63 28 30 2e Data Ascii: 625remvar(--mantine-scale));--section-padding-x-xl:calc(2remvar(--mantine-scale));--section-padding-x-compact-xs:calc(0.4375remvar(--mantine-scale));--section-padding-x-compact-sm:calc(0.5remvar(--mantine-scale));--section-padding-x-compact-md:calc(0.
2025-03-18 16:51:50 UTC	16384	IN	Data Raw: 6c 65 29 29 3b 2d 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 7a 65 2d 78 6c 3a 63 61 6c 63 28 38 32 2e 35 72 65 6d 2a 76 61 72 28 2d 2d 6d 61 6e 74 69 6e 65 2d 73 63 61 6c 65 29 29 3b 2d 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 7a 65 2d 6d 64 29 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 3a 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 76 61 72 28 2d 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 7a 65 29 3b 70 61 64 64 69 6e 67 2d 69 6e 6c 69 6e 65 3a 76 61 72 28 2d 2d 6d 61 6e 74 69 6e 65 2d 73 70 61 63 69 6e 67 2d 6d 64 29 7d 2e 6d 5f 37 34 38 35 63 61 63 65 3a 77 68 65 72 65 28 5b 64 61 74 61 2d 66 6c 75 69 64 5d 29 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 5f 65 32 31 32 35 61 32 37 7b 2d 2d Data Ascii: le));--container-size-xl:calc(82.5rem*var(--mantine-scale));--container-size:var(--container-size-md);margin-inline:auto;max-width:var(--container-size);padding-inline:var(--mantine-spacing-md)}.m_7485cace:where([data-fluid]){max-width:100%}.m_e2125a27{--
2025-03-18 16:51:50 UTC	16384	IN	Data Raw: 39 30 30 39 30 62 35 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 31 35 73 20 65 61 73 65 7d 2e 6d 5f 36 39 30 30 39 30 62 35 3e 73 76 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 6d 5f 36 39 30 30 39 30 62 35 3a 77 68 65 72 65 28 5b 64 61 74 61 2d 70 6f 73 69 74 69 6f 6e 3d 6c 65 66 74 5d 29 7b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 76 61 72 28 2d 2d 6d 61 6e 74 69 6e 65 2d 73 70 61 63 69 6e 67 2d 73 6d 29 7d 2e 6d 5f 36 39 30 30 39 30 62 35 3a 77 68 65 72 65 28 5b 64 61 74 61 2d 70 6f 73 69 74 69 6f 6e 3d 72 69 67 68 74 5d 29 7b 6d 61 72 67 69 6e Data Ascii: 90090b5{align-items:center;display:flex;justify-content:center;transition:transform .15s ease}.m_690090b5>svg{display:block}.m_690090b5:where([data-position=left]){margin-inline-end:var(--mantine-spacing-sm)}.m_690090b5:where([data-position=right]){margin

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:51:51 UTC	588	OUT	GET /utag/lfg/mlp/prod/utag.js HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.mylincolnportal.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 16:51:51 UTC	579	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 61149 Connection: close Date: Tue, 18 Mar 2025 16:51:52 GMT Last-Modified: Thu, 19 Dec 2024 12:36:07 GMT ETag: "e01439cc5e8c72be95c1eb42c3f21a52" x-amz-server-side-encryption: AES256 x-amz-version-id: 1b5GfQZEXGlDUAY23ZP5X77Y3_g_WMoB Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 af1c2193a818b5824fd85ddd651620a8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: QmassGdz3dFLU3pePcbhA5ZuLHq6eNFrQzQM0rRWSmIOZDFAtcyaWQ== Cache-Control: max-age=300
2025-03-18 16:51:51 UTC	15805	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 6c 6f 61 64 65 72 20 75 74 34 2e 30 2e 32 30 32 34 31 32 31 39 31 32 33 35 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 75 74 61 67 5f 63 6f 6e 64 6c 6f 61 64 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 5f 74 65 61 6c 69 75 6d 5f 74 77 63 5f 73 77 69 74 63 68 3d 66 61 6c 73 65 3b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 74 79 70 65 6f 66 20 75 74 61 67 5f 64 61 74 61 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 75 74 61 67 5f 64 61 74 61 3d 7b 7d 3b 61 3d 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 Data Ascii: //tealium universal tag - utag.loader ut4.0.202412191235, Copyright 2024 Tealium.com Inc. All Rights Reserved.var utag_condload=false;window.__tealium_twc_switch=false;try{(function(a,b,c){if(typeof utag_data=='undefined')utag_data={};a=location.pathname
2025-03-18 16:51:51 UTC	1130	IN	Data Raw: 69 6e 65 64 22 29 7b 6b 5b 6a 5d 3d 31 3b 68 5b 67 5b 69 5d 5d 3d 31 3b 7d 7d 0a 67 3d 5b 5d 3b 66 6f 72 28 69 20 69 6e 20 75 74 61 67 2e 6c 6f 61 64 65 72 2e 47 56 28 68 29 29 7b 67 2e 70 75 73 68 28 69 29 3b 7d 7d 0a 64 5b 65 5d 3d 67 7d 7d 65 6c 73 65 20 64 5b 65 5d 3d 66 3b 7d 0a 69 66 28 75 74 61 67 2e 6c 6f 61 64 65 72 2e 63 6f 6e 76 65 72 74 69 6e 67 54 6f 53 70 6c 69 74 43 6f 6f 6b 69 65 73 28 29 3d 3d 3d 74 72 75 65 29 7b 64 65 6c 65 74 65 20 64 5b 61 5d 3b 7d 0a 64 61 74 61 3d 75 74 61 67 2e 6c 6f 61 64 65 72 2e 47 56 28 64 29 3b 68 3d 6e 65 77 20 41 72 72 61 79 28 29 3b 66 6f 72 28 67 20 69 6e 20 64 61 74 61 29 7b 69 66 28 75 74 61 67 2e 75 74 2e 74 79 70 65 4f 66 28 64 5b 67 5d 29 3d 3d 22 61 72 72 61 79 22 29 7b 66 6f 72 28 63 3d 30 3b 63 3c Data Ascii: ined"){k[j]=1;h[g[i]]=1;}}g=[];for(i in utag.loader.GV(h)){g.push(i);}}d[e]=g}}else d[e]=f;}if(utag.loader.convertingToSplitCookies()===true){delete d[a];}data=utag.loader.GV(d);h=new Array();for(g in data){if(utag.ut.typeOf(d[g])=="array"){for(c=0;c<
2025-03-18 16:51:51 UTC	16384	IN	Data Raw: 6c 74 53 65 73 73 69 6f 6e 45 78 70 69 72 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 3d 5b 22 5f 70 6e 22 2c 22 5f 73 73 22 2c 22 5f 73 74 22 2c 22 5f 73 65 73 5f 69 64 22 2c 22 5f 73 65 22 5d 3b 76 61 72 20 6f 72 69 67 69 6e 61 6c 45 78 70 69 72 61 74 69 6f 6e 3d 65 78 70 69 72 61 74 69 6f 6e 3b 69 66 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 64 61 74 61 29 2e 6c 65 6e 67 74 68 3e 30 29 7b 66 6f 72 28 76 61 72 20 6b 65 79 20 69 6e 20 64 61 74 61 29 7b 65 78 70 69 72 61 74 69 6f 6e 3d 6f 72 69 67 69 6e 61 6c 45 78 70 69 72 61 74 69 6f 6e 3b 69 66 28 21 75 74 61 67 2e 6c 6f 61 64 65 72 2e 63 6f 6f 6b 69 65 49 73 41 6c 6c 6f 77 65 64 28 6b 65 79 29 29 7b 63 6f 6e 74 69 6e 75 65 3b 7d 0a 76 61 72 20 76 61 6c 75 65 3d 53 74 72 69 6e 67 28 64 61 74 61 5b 6b 65 79 5d 29 Data Ascii: ltSessionExpirationCookies=["_pn","_ss","_st","_ses_id","_se"];var originalExpiration=expiration;if(Object.keys(data).length>0){for(var key in data){expiration=originalExpiration;if(!utag.loader.cookieIsAllowed(key)){continue;}var value=String(data[key])
2025-03-18 16:51:51 UTC	16384	IN	Data Raw: 73 27 5d 5d 3b 62 5b 27 65 76 65 6e 74 5f 61 63 74 69 6f 6e 5f 73 74 61 74 75 73 27 5d 3d 63 2e 6a 6f 69 6e 28 27 20 2d 20 27 29 7d 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 3b 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 72 79 7b 69 66 28 31 29 7b 62 5b 27 75 73 65 72 5f 73 74 61 74 75 73 27 5d 3d 27 75 6e 6b 6e 6f 77 6e 27 7d 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 3b 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 72 79 7b 69 66 28 28 62 5b 27 5f 70 61 74 68 6e 61 6d 65 32 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 21 3d 27 72 65 67 69 73 74 72 61 74 69 6f 6e 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 62 5b 27 5f 70 61 74 68 6e 61 6d 65 32 27 5d 2e 74 6f Data Ascii: s']];b['event_action_status']=c.join(' - ')}}catch(e){utag.DB(e);}},function(a,b){try{if(1){b['user_status']='unknown'}}catch(e){utag.DB(e);}},function(a,b){try{if((b['_pathname2'].toString().toLowerCase()!='registration'.toLowerCase()&&b['_pathname2'].to
2025-03-18 16:51:51 UTC	11446	IN	Data Raw: 73 65 72 76 65 72 2e 69 6e 64 65 78 4f 66 28 22 2d 63 6f 6c 6c 65 63 74 2d 22 29 3e 2d 31 29 7b 75 2e 73 65 72 76 65 72 5f 70 72 65 66 69 78 3d 75 2e 74 61 67 5f 63 6f 6e 66 69 67 5f 73 65 72 76 65 72 2e 73 70 6c 69 74 28 22 63 6f 6c 6c 65 63 74 2d 22 29 5b 30 5d 3b 7d 0a 69 66 28 75 2e 74 61 67 5f 63 6f 6e 66 69 67 5f 72 65 67 69 6f 6e 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 75 2e 74 61 67 5f 63 6f 6e 66 69 67 5f 73 65 72 76 65 72 2e 69 6e 64 65 78 4f 66 28 75 2e 73 65 72 76 65 72 5f 70 72 65 66 69 78 2b 22 63 6f 6c 6c 65 63 74 2e 22 2b 75 2e 73 65 72 76 65 72 5f 64 6f 6d 61 69 6e 29 3e 30 29 7b 75 2e 74 61 67 5f 63 6f 6e 66 69 67 5f 73 65 72 76 65 72 3d 75 2e 74 61 67 5f 63 6f 6e 66 69 67 5f 73 65 72 76 65 72 2e 72 65 70 6c 61 63 65 28 75 2e 73 65 72 Data Ascii: server.indexOf("-collect-")>-1){u.server_prefix=u.tag_config_server.split("collect-")[0];}if(u.tag_config_region!=="default"&&u.tag_config_server.indexOf(u.server_prefix+"collect."+u.server_domain)>0){u.tag_config_server=u.tag_config_server.replace(u.ser

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:51:51 UTC	612	OUT	GET /customer/transformed.8ee4cbfb93a5e1e20864.js HTTP/1.1 Host: www.mylincolnportal.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mylincolnportal.com/customer/public/migration-help Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 16:51:52 UTC	989	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 16:51:52 GMT Content-Type: text/javascript Content-Length: 5771646 Connection: close Access-Control-Expose-Headers: mlp-trace-id Last-Modified: Mon, 17 Mar 2025 20:03:22 GMT x-amz-server-side-encryption: aws:kms x-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:us-east-1:588826796381:key/aca7ef27-c35b-43d1-89ca-784474f5f57e Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=0 ETag: "de341a60a24a045b538111b6b9a97434" X-Cache: RefreshHit from cloudfront Via: 1.1 38cef1c836ffc2dbf330045540e35a76.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD58-P2 X-Amz-Cf-Id: SHHL6ndyl330F_76exG3M2RCONo4NqFzSKaFyr6H_Y1UMYE2K31z_g== mlp-trace-id: 67d9a4a82cbda920310fbbbc4078c9a1 Content-Security-Policy: frame-ancestors 'self' x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-XSS-Protection: 0
2025-03-18 16:51:52 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 3d 7b 31 31 39 38 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 28 31 35 30 33 33 29 2c 6e 28 38 38 30 33 33 29 2c 6e 28 37 32 38 36 33 29 2c 6e 28 35 36 31 34 31 29 2c 6e 28 37 34 33 31 36 29 2c 6e 28 31 31 37 29 2c 6e 28 38 36 38 36 33 29 2c 6e 28 33 30 32 39 30 29 2c 6e 28 34 34 30 30 37 29 2c 6e 28 39 31 32 33 35 29 2c 6e 28 35 38 39 33 30 29 2c 6e 28 33 31 37 39 34 29 2c 6e 28 31 35 32 33 29 2c 6e 28 33 35 36 36 36 29 7d 2c 31 35 30 33 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 28 39 38 39 39 37 29 2c 6e 28 35 37 39 34 34 29 2c 6e 28 36 35 33 38 38 29 2c 6e 28 31 30 32 36 36 29 2c 6e 28 35 37 35 35 37 29 2c 6e 28 36 33 33 38 Data Ascii: !function(){var e,t,n={11983:function(e,t,n){"use strict";n(15033),n(88033),n(72863),n(56141),n(74316),n(117),n(86863),n(30290),n(44007),n(91235),n(58930),n(31794),n(1523),n(35666)},15033:function(e,t,n){n(98997),n(57944),n(65388),n(10266),n(57557),n(6338
2025-03-18 16:51:52 UTC	16367	IN	Data Raw: 20 79 2e 63 61 6c 6c 28 65 2c 74 68 69 73 29 7d 29 7d 7d 7d 2c 36 34 33 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 35 39 37 31 39 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 72 28 74 68 69 73 29 2c 74 3d 22 22 3b 72 65 74 75 72 6e 20 65 2e 67 6c 6f 62 61 6c 26 26 28 74 2b 3d 22 67 22 29 2c 65 2e 69 67 6e 6f 72 65 43 61 73 65 26 26 28 74 2b 3d 22 69 22 29 2c 65 2e 6d 75 6c 74 69 6c 69 6e 65 26 26 28 74 2b 3d 22 6d 22 29 2c 65 2e 75 6e 69 63 6f 64 65 26 26 28 74 2b 3d 22 75 22 29 2c 65 2e 73 74 69 63 6b 79 26 26 28 74 2b 3d 22 79 22 29 2c 74 7d 7d 2c 33 38 38 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 Data Ascii: y.call(e,this)})}}},6439:function(e,t,n){"use strict";var r=n(59719);e.exports=function(){var e=r(this),t="";return e.global&&(t+="g"),e.ignoreCase&&(t+="i"),e.multiline&&(t+="m"),e.unicode&&(t+="u"),e.sticky&&(t+="y"),t}},3885:function(e,t,n){"use stric
2025-03-18 16:51:52 UTC	16384	IN	Data Raw: 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 46 75 6e 63 74 69 6f 6e 28 65 29 2c 74 29 7d 2c 72 28 67 29 2c 67 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 65 6c 65 74 65 20 76 5b 65 5d 7d 2c 22 70 72 6f 63 65 73 73 22 3d 3d 6e 28 38 39 34 32 36 29 28 64 29 3f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 2e 6e 65 78 74 54 69 63 6b 28 6f 28 62 2c 65 2c 31 29 29 7d 3a 6d 26 26 6d 2e 6e 6f 77 3f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6d 2e 6e 6f 77 28 6f 28 62 2c 65 2c 31 29 29 7d 3a 66 3f 28 69 3d 28 61 3d 6e 65 77 20 66 29 2e 70 6f 72 74 32 2c 61 2e 70 6f 72 74 31 2e 6f 6e 6d 65 73 73 61 67 65 3d 78 2c 72 3d 6f 28 69 2e 70 6f 73 74 4d 65 73 73 61 67 65 2c 69 2c 31 29 29 3a 75 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 22 66 Data Ascii: tion"==typeof e?e:Function(e),t)},r(g),g},h=function(e){delete v[e]},"process"==n(89426)(d)?r=function(e){d.nextTick(o(b,e,1))}:m&&m.now?r=function(e){m.now(o(b,e,1))}:f?(i=(a=new f).port2,a.port1.onmessage=x,r=o(i.postMessage,i,1)):u.addEventListener&&"f
2025-03-18 16:51:52 UTC	16384	IN	Data Raw: 7d 2c 35 39 34 38 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 33 35 33 36 36 29 2c 61 3d 6e 28 39 38 35 37 29 3b 72 28 72 2e 50 2b 72 2e 46 2a 21 6e 28 38 35 31 33 39 29 28 5b 5d 2e 72 65 64 75 63 65 2c 21 30 29 2c 22 41 72 72 61 79 22 2c 7b 72 65 64 75 63 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 28 74 68 69 73 2c 65 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 21 31 29 7d 7d 29 7d 2c 36 35 34 34 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 33 35 33 36 36 29 2c 61 3d 6e 28 32 36 31 33 37 29 2c 69 3d 6e 28 38 39 34 32 36 29 2c 6f 3d 6e 28 31 Data Ascii: },59483:function(e,t,n){"use strict";var r=n(35366),a=n(9857);r(r.P+r.F*!n(85139)([].reduce,!0),"Array",{reduce:function(e){return a(this,e,arguments.length,arguments[1],!1)}})},65441:function(e,t,n){"use strict";var r=n(35366),a=n(26137),i=n(89426),o=n(1
2025-03-18 16:51:52 UTC	16104	IN	Data Raw: 30 21 3d 3d 6f 2e 67 65 74 3f 6f 2e 67 65 74 2e 63 61 6c 6c 28 75 29 3a 76 6f 69 64 20 30 3a 73 28 63 3d 61 28 74 29 29 3f 65 28 63 2c 6e 2c 75 29 3a 76 6f 69 64 20 30 7d 7d 29 7d 2c 33 32 34 37 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 33 35 33 36 36 29 3b 72 28 72 2e 53 2c 22 52 65 66 6c 65 63 74 22 2c 7b 68 61 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 7d 7d 29 7d 2c 31 32 39 32 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 33 35 33 36 36 29 2c 61 3d 6e 28 35 39 37 31 39 29 2c 69 3d 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 3b 72 28 72 2e 53 2c 22 52 65 66 6c 65 63 74 22 2c 7b 69 73 45 78 74 65 6e 73 69 62 6c 65 3a 66 75 6e 63 Data Ascii: 0!==o.get?o.get.call(u):void 0:s(c=a(t))?e(c,n,u):void 0}})},32475:function(e,t,n){var r=n(35366);r(r.S,"Reflect",{has:function(e,t){return t in e}})},12924:function(e,t,n){var r=n(35366),a=n(59719),i=Object.isExtensible;r(r.S,"Reflect",{isExtensible:func
2025-03-18 16:51:52 UTC	280	IN	Data Raw: 7d 29 29 29 7d 2c 33 33 33 30 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 33 33 35 30 33 29 2c 61 3d 6e 28 39 31 36 30 33 29 2c 69 3d 22 57 65 61 6b 53 65 74 22 3b 6e 28 35 38 30 39 31 29 28 69 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 76 6f 69 64 20 30 29 7d 7d 29 2c 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 64 65 66 28 61 28 74 68 69 73 2c 69 29 2c 65 2c 21 30 29 7d 7d 2c 72 2c 21 31 2c 21 30 29 7d 2c 39 38 31 32 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c Data Ascii: })))},33307:function(e,t,n){"use strict";var r=n(33503),a=n(91603),i="WeakSet";n(58091)(i,(function(e){return function(){return e(this,arguments.length>0?arguments[0]:void 0)}}),{add:function(e){return r.def(a(this,i),e,!0)}},r,!1,!0)},98125:function(e,t,
2025-03-18 16:51:52 UTC	16384	IN	Data Raw: 35 33 36 36 29 2c 61 3d 6e 28 33 38 38 35 29 2c 69 3d 6e 28 35 34 32 30 30 29 2c 6f 3d 6e 28 36 31 38 33 38 29 2c 73 3d 6e 28 32 33 30 37 39 29 2c 6c 3d 6e 28 34 34 30 38 37 29 3b 72 28 72 2e 50 2c 22 41 72 72 61 79 22 2c 7b 66 6c 61 74 4d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 3d 69 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 73 28 65 29 2c 74 3d 6f 28 72 2e 6c 65 6e 67 74 68 29 2c 6e 3d 6c 28 72 2c 30 29 2c 61 28 6e 2c 72 2c 72 2c 74 2c 30 2c 31 2c 65 2c 61 72 67 75 6d 65 6e 74 73 5b 31 5d 29 2c 6e 7d 7d 29 2c 6e 28 31 32 38 30 32 29 28 22 66 6c 61 74 4d 61 70 22 29 7d 2c 34 39 33 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 33 35 33 36 36 29 2c 61 Data Ascii: 5366),a=n(3885),i=n(54200),o=n(61838),s=n(23079),l=n(44087);r(r.P,"Array",{flatMap:function(e){var t,n,r=i(this);return s(e),t=o(r.length),n=l(r,0),a(n,r,r,t,0,1,e,arguments[1]),n}}),n(12802)("flatMap")},49348:function(e,t,n){"use strict";var r=n(35366),a
2025-03-18 16:51:52 UTC	16104	IN	Data Raw: 2c 33 37 33 34 33 39 37 35 38 36 2c 32 31 37 36 34 30 33 39 32 30 2c 31 32 38 30 33 34 38 31 38 37 2c 31 39 30 38 38 32 33 35 37 32 2c 33 38 37 31 37 38 36 39 34 31 2c 38 34 36 38 36 31 33 32 32 2c 31 31 37 32 34 32 36 37 35 38 2c 33 32 38 37 34 34 38 34 37 34 2c 33 33 38 33 33 38 33 30 33 37 2c 31 36 35 35 31 38 31 30 35 36 2c 33 31 33 39 38 31 33 33 34 36 2c 39 30 31 36 33 32 37 35 38 2c 31 38 39 37 30 33 31 39 34 31 2c 32 39 38 36 36 30 37 31 33 38 2c 33 30 36 36 38 31 30 32 33 36 2c 33 34 34 37 31 30 32 35 30 37 2c 31 33 39 33 36 33 39 31 30 34 2c 33 37 33 33 35 31 33 37 39 2c 39 35 30 37 37 39 32 33 32 2c 36 32 35 34 35 34 35 37 36 2c 33 31 32 34 32 34 30 35 34 30 2c 34 31 34 38 36 31 32 37 32 36 2c 32 30 30 37 39 39 38 39 31 37 2c 35 34 34 35 36 33 Data Ascii: ,3734397586,2176403920,1280348187,1908823572,3871786941,846861322,1172426758,3287448474,3383383037,1655181056,3139813346,901632758,1897031941,2986607138,3066810236,3447102507,1393639104,373351379,950779232,625454576,3124240540,4148612726,2007998917,544563
2025-03-18 16:51:52 UTC	16384	IN	Data Raw: 75 28 54 2c 6a 2c 44 2c 4c 2c 78 2c 35 2c 73 5b 32 34 5d 29 2c 4c 3d 75 28 4c 2c 54 2c 6a 2c 44 2c 45 2c 39 2c 73 5b 32 35 5d 29 2c 44 3d 75 28 44 2c 4c 2c 54 2c 6a 2c 66 2c 31 34 2c 73 5b 32 36 5d 29 2c 6a 3d 75 28 6a 2c 44 2c 4c 2c 54 2c 62 2c 32 30 2c 73 5b 32 37 5d 29 2c 54 3d 75 28 54 2c 6a 2c 44 2c 4c 2c 53 2c 35 2c 73 5b 32 38 5d 29 2c 4c 3d 75 28 4c 2c 54 2c 6a 2c 44 2c 68 2c 39 2c 73 5b 32 39 5d 29 2c 44 3d 75 28 44 2c 4c 2c 54 2c 6a 2c 79 2c 31 34 2c 73 5b 33 30 5d 29 2c 54 3d 64 28 54 2c 6a 3d 75 28 6a 2c 44 2c 4c 2c 54 2c 43 2c 32 30 2c 73 5b 33 31 5d 29 2c 44 2c 4c 2c 67 2c 34 2c 73 5b 33 32 5d 29 2c 4c 3d 64 28 4c 2c 54 2c 6a 2c 44 2c 62 2c 31 31 2c 73 5b 33 33 5d 29 2c 44 3d 64 28 44 2c 4c 2c 54 2c 6a 2c 5f 2c 31 36 2c 73 5b 33 34 5d 29 2c Data Ascii: u(T,j,D,L,x,5,s[24]),L=u(L,T,j,D,E,9,s[25]),D=u(D,L,T,j,f,14,s[26]),j=u(j,D,L,T,b,20,s[27]),T=u(T,j,D,L,S,5,s[28]),L=u(L,T,j,D,h,9,s[29]),D=u(D,L,T,j,y,14,s[30]),T=d(T,j=u(j,D,L,T,C,20,s[31]),D,L,g,4,s[32]),L=d(L,T,j,D,b,11,s[33]),D=d(D,L,T,j,_,16,s[34]),
2025-03-18 16:51:52 UTC	16384	IN	Data Raw: 73 2c 61 3d 38 2a 74 2e 73 69 67 42 79 74 65 73 3b 72 65 74 75 72 6e 20 6e 5b 61 3e 3e 3e 35 5d 7c 3d 31 32 38 3c 3c 32 34 2d 61 25 33 32 2c 6e 5b 31 34 2b 28 61 2b 36 34 3e 3e 3e 39 3c 3c 34 29 5d 3d 65 2e 66 6c 6f 6f 72 28 72 2f 34 32 39 34 39 36 37 32 39 36 29 2c 6e 5b 31 35 2b 28 61 2b 36 34 3e 3e 3e 39 3c 3c 34 29 5d 3d 72 2c 74 2e 73 69 67 42 79 74 65 73 3d 34 2a 6e 2e 6c 65 6e 67 74 68 2c 74 68 69 73 2e 5f 70 72 6f 63 65 73 73 28 29 2c 74 68 69 73 2e 5f 68 61 73 68 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 69 2e 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 65 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 65 7d 7d 29 3b 74 2e 53 48 41 32 35 36 3d 69 2e 5f 63 Data Ascii: s,a=8t.sigBytes;return n[a>>>5]\|=128<<24-a%32,n[14+(a+64>>>9<<4)]=e.floor(r/4294967296),n[15+(a+64>>>9<<4)]=r,t.sigBytes=4n.length,this._process(),this._hash},clone:function(){var e=i.clone.call(this);return e._hash=this._hash.clone(),e}});t.SHA256=i._c

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:51:52 UTC	768	OUT	GET /notice?domain=lincolnfinancialgroup.com&c=teconsent&js=nj&noticeType=bb&gtm=1&text=true&pcookie&cookieLink=https%3A%2F%2Fwww.lincolnfinancial.com%2Fpublic%2Fgeneral%2Fprivacy%2Fonlineprivacypolicy HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive Origin: https://www.mylincolnportal.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.mylincolnportal.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 16:51:52 UTC	505	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Tue, 18 Mar 2025 16:51:52 GMT X-Cache: Miss from cloudfront Via: 1.1 3fd7afcdda21f0b562dfcbf7920c44a0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: 4Hms1qIAZR3ZYaCJt-A8ziL9zaIFT5rmasrDnGZ7nHTwKDmP3N88cA== Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: max-age=3600 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2025-03-18 16:51:52 UTC	15879	IN	Data Raw: 35 65 63 37 0d 0a 76 61 72 20 74 72 75 73 74 65 3d 77 69 6e 64 6f 77 2e 74 72 75 73 74 65 7c 7c 7b 7d 3b 74 72 75 73 74 65 2e 62 6e 7c 7c 28 74 72 75 73 74 65 2e 62 6e 3d 7b 7d 29 3b 74 72 75 73 74 65 2e 65 75 7c 7c 28 74 72 75 73 74 65 2e 65 75 3d 7b 7d 29 3b 74 72 75 73 74 65 2e 75 74 69 6c 7c 7c 28 74 72 75 73 74 65 2e 75 74 69 6c 3d 7b 7d 29 3b 0a 74 72 75 73 74 65 2e 75 74 69 6c 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 64 2c 67 29 7b 67 3d 67 7c 7c 7b 7d 3b 76 61 72 20 66 3d 64 26 26 64 2e 74 6f 53 74 72 69 6e 67 28 29 7c 7c 22 22 2c 63 3d 67 2e 63 61 6c 6c 65 72 7c 7c 22 22 3b 69 66 28 64 26 26 64 2e 73 74 61 63 6b 29 7b 66 2b 3d 22 5c 6e 22 2b 64 2e 73 74 61 63 6b 2e 6d 61 74 63 68 28 2f 28 40 7c 61 74 29 5b 5e 5c 6e 5c 72 5c 74 5d 2a Data Ascii: 5ec7var truste=window.truste\|\|{};truste.bn\|\|(truste.bn={});truste.eu\|\|(truste.eu={});truste.util\|\|(truste.util={});truste.util.error=function(h,d,g){g=g\|\|{};var f=d&&d.toString()\|\|"",c=g.caller\|\|"";if(d&&d.stack){f+="\n"+d.stack.match(/(@\|at)[^\n\r\t]*
2025-03-18 16:51:53 UTC	8392	IN	Data Raw: 61 72 67 65 74 3b 63 2e 66 65 61 74 2e 63 63 70 61 64 65 66 61 75 6c 74 3d 74 79 70 65 6f 66 20 24 74 65 6d 70 5f 63 63 70 61 64 65 66 61 75 6c 74 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 24 74 65 6d 70 5f 63 63 70 61 64 65 66 61 75 6c 74 3b 0a 63 2e 66 65 61 74 2e 6e 6f 73 63 72 6f 6c 6c 74 6f 70 3d 74 79 70 65 6f 66 20 24 74 65 6d 70 5f 6e 6f 73 63 72 6f 6c 6c 74 6f 70 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 24 74 65 6d 70 5f 6e 6f 73 63 72 6f 6c 6c 74 6f 70 3b 63 2e 70 61 72 61 6d 73 3d 7b 7d 3b 63 2e 62 6e 46 6c 61 67 73 3d 7b 7d 3b 0a 74 72 75 73 74 65 2e 62 6e 2e 61 64 64 53 63 72 69 70 74 45 6c 65 6d 28 63 2e 6e 6f 74 69 63 65 4a 73 55 52 4c 2c 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 76 61 72 20 6d 3b 76 61 72 20 6c 3d 66 75 6e 63 74 69 6f Data Ascii: arget;c.feat.ccpadefault=typeof $temp_ccpadefault!="undefined"&&$temp_ccpadefault;c.feat.noscrolltop=typeof $temp_noscrolltop!="undefined"&&$temp_noscrolltop;c.params={};c.bnFlags={};truste.bn.addScriptElem(c.noticeJsURL,function d(){var m;var l=functio
2025-03-18 16:51:53 UTC	911	IN	Data Raw: 33 38 38 0d 0a 73 65 6e 74 2d 74 65 78 74 7b 20 20 20 20 20 20 77 69 64 74 68 3a 31 30 30 25 3b 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 20 20 20 7d 20 20 7d 3c 2f 73 74 79 6c 65 3e 3c 64 69 76 20 69 64 3d 22 74 72 75 73 74 65 2d 63 6f 6e 73 65 6e 74 2d 74 72 61 63 6b 22 20 73 74 79 6c 65 3d 22 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 39 39 3b 22 3e 20 20 3c 64 69 76 20 69 64 3d 22 74 72 75 73 74 61 72 63 2d 62 61 6e 6e 65 72 2d 6f 76 65 72 6c 61 79 22 3e 3c 2f 64 69 76 3e 20 20 3c 64 69 76 20 69 64 3d 22 74 72 75 73 74 65 2d 63 6f 6e 73 65 6e 74 2d 63 6f 6e 74 65 6e 74 22 20 73 74 79 6c 65 3d 22 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 Data Ascii: 388sent-text{ width:100%; margin-bottom: 20px !important; } }</style><div id="truste-consent-track" style="position:relative;z-index:999999;"> <div id="trustarc-banner-overlay"></div> <div id="truste-consent-content" style="overflow: hid
2025-03-18 16:51:53 UTC	8276	IN	Data Raw: 32 30 34 63 0d 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 20 20 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 27 3b 0a 50 3d 50 2e 72 65 70 6c 61 63 65 28 22 26 6c 74 3b 69 26 67 74 3b 22 2c 22 3c 69 3e 22 29 2e 72 65 70 6c 61 63 65 28 22 26 6c 74 3b 2f 69 26 67 74 3b 22 2c 22 3c 2f 69 3e 22 29 2e 72 65 70 6c 61 63 65 28 22 26 6c 74 3b 62 26 67 74 3b 22 2c 22 3c 62 3e 22 29 2e 72 65 70 6c 61 63 65 28 22 26 6c 74 3b 2f 62 26 67 74 3b 22 2c 22 3c 2f 62 3e 22 29 3b 0a 69 66 28 21 50 7c 7c 50 2e 6c 65 6e 67 74 68 3c 31 35 29 7b 50 3d 27 3c 64 69 76 20 69 64 3d 22 74 72 75 73 74 65 2d 63 6f 6e 73 65 6e 74 2d 74 72 61 63 6b 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 22 3e 3c 64 69 76 Data Ascii: 204c </div> </div></div>';P=P.replace("<i>","<i>").replace("</i>","</i>").replace("<b>","<b>").replace("</b>","</b>");if(!P\|\|P.length<15){P='<div id="truste-consent-track" style="display:none; background-color:#000;"><div
2025-03-18 16:51:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:51:53 UTC	598	OUT	GET /asset/notice.js/v/v1.7-675 HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive Origin: https://www.mylincolnportal.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.mylincolnportal.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 16:51:54 UTC	597	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 33049 Connection: close Date: Tue, 18 Mar 2025 16:51:53 GMT Last-Modified: Wed, 12 Mar 2025 02:54:19 GMT Content-Encoding: gzip Pragma: public Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 2a6277094357eb47f8dbeacb06ed96c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: pMy5hzSE5tYt5ppAlVMucTLJhRz77uTaHSqIoqNATs0AL8GUzpBKEg== Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2025-03-18 16:51:54 UTC	15787	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 ff ec bd 6b 77 dc 38 8e 30 fc dd bf a2 ac 99 f5 48 6d b9 2c d5 fd d2 6a bf 69 c7 9d 78 36 b7 13 27 bd 3b e3 b8 7d 74 ab 72 b5 55 97 48 65 3b 6e cb ff fd 05 40 52 22 75 29 97 33 3d fb ec 73 ce d3 bb e3 94 24 12 04 41 10 04 40 10 9c dc 2c fc f5 6c b9 68 5c ae e3 9b 64 1d 5e 86 37 ba f1 30 11 6f f1 e1 d6 8d 1b 57 0e fb dc 0c 6f 9a de 6c 11 bc 75 57 e3 ab e6 24 74 d7 cd 59 72 bc 5c 24 e1 62 fd 31 5c c7 b3 f0 36 0c 1c fe c5 8f 97 49 f2 72 39 77 67 8b a3 da c2 a3 5d 6b 3c 9b e8 bb 37 cd 60 b9 08 f7 f6 78 3b 37 eb 59 24 97 4e 96 11 14 d6 0d e3 81 15 74 a0 1a 22 76 ed 08 5c 39 a6 ae a3 2f c2 bb c6 4b 77 1d 1a cd 69 b8 fe 34 9b 87 ba 61 fa 8e 0c 38 0e dd e0 78 b9 bc 9e 85 7a de af e3 f7 ef ff f3 f4 e4 f2 e3 c9 87 f7 1f cc 5d cb 30 83 72 Data Ascii: kw80Hm,jix6';}trUHe;n@R"u)3=s$A@,lh\d^70oWoluW$tYr\$b1\6Ir9wg]k<7`x;7Y$Nt"v\9/Kwi4a8xz]0r
2025-03-18 16:51:54 UTC	15847	IN	Data Raw: e5 57 2d 9c 40 02 be 6e fd b0 41 4d 11 b6 6b e8 90 bf 60 3e 5b e8 2d bb d3 ef 0c da bd 4e df 0c f6 5b 27 3d cc 1c a2 35 30 88 0f ff 7e a5 bf 31 fe 05 71 46 8b 0a 3b b6 38 77 bf 1d d0 23 3b 5a 4e 3f f1 ec cc 18 97 b8 23 3d c2 75 64 c1 4f a5 8c 1a 1d 8b 4e af a3 7d f2 cc c3 33 94 d8 0d 30 8e 9d af 95 20 8d 91 cb 97 35 3c 55 f6 5c e8 a2 2e 3b f5 33 de 1e 80 7a 6a 88 23 f9 8c fa ea a1 1d 58 59 ac ff 78 b2 7e e9 98 50 56 2d 3b c0 2f ac db c6 43 be 16 1e d0 b2 34 6a fc c5 b2 ac 31 57 16 46 0d ab d9 19 e7 89 07 68 c1 1d 73 ad 0f 47 b4 cc 1e 3d 60 0f 1b d8 63 5f 1b f3 71 c7 d6 c7 62 38 e8 81 d2 16 e0 b0 20 5d d8 2f 44 68 02 9a df 88 6f a2 8c 27 b3 68 8d 09 05 5e 44 ab 2b 57 7f 2f f0 19 80 a2 af 66 37 e0 5d a9 49 e8 20 be fa e5 fc 06 fc 93 48 6f e0 b3 2c 0e 93 9c Data Ascii: W-@nAMk`>[-N['=50~1qF;8w#;ZN?#=udON}30 5<U\.;3zj#XYx~PV-;/C4j1WFhsG=`c_qb8 ]/Dho'h^D+W/f7]I Ho,
2025-03-18 16:51:54 UTC	1415	IN	Data Raw: 21 d1 26 45 56 d7 4a c8 e5 6f 2d 0a 4b d9 5f 62 58 c0 17 a0 ca 23 96 da 2c 99 d8 d2 69 6d b7 18 96 ce 6e 7a e6 00 d8 24 b8 46 27 31 01 70 c2 ce 3b 88 81 73 43 b7 7c 86 86 3c 3a 49 62 02 24 63 f0 57 bc e0 40 e9 a9 22 6a 8c 3c 2c 81 32 04 7b b5 68 b1 04 7e 60 c3 de fe 81 2b c7 00 4e 31 01 2a 78 08 4b 6b e5 84 7a 40 e7 39 22 9d 75 f7 3d 4f 68 66 2c d6 83 59 ca bf 64 80 79 c6 f8 8f 28 82 1c 88 0f 27 bf 71 7f b3 bb 98 5c 4c 87 fd 67 83 8b 7e ef 55 94 5d dd 14 ab fe 6d 5b 82 78 32 e0 92 09 79 7b e8 75 2f 2e 06 db c9 6f de c5 c5 94 3d f6 d0 39 d9 43 62 98 c1 b1 de f5 ba 64 88 cf 3c 4b 9f 07 8d 3b fc 0d 7d 07 37 93 e9 e0 f1 64 77 31 45 0f c2 1f 54 c9 ec 5e c3 cd 17 18 43 85 58 53 6a 76 fb f7 72 51 48 6b 3d 9c 9e 56 a4 71 c3 e3 53 d6 eb 1e 9f 9a a8 ba de 60 30 00 Data Ascii: !&EVJo-K_bX#,imnz$F'1p;sC\|<:Ib$cW@"j<,2{h~`+N1*xKkz@9"u=Ohf,Ydy('q\Lg~U]m[x2y{u/.o=9Cbd<K;}7dw1ET^CXSjvrQHk=VqS`0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:51:53 UTC	789	OUT	GET /get?name=crossdomain.html&domain=lincolnfinancialgroup.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://www.mylincolnportal.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 16:51:54 UTC	492	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1084 Connection: close Date: Tue, 18 Mar 2025 16:51:53 GMT Content-Encoding: gzip Pragma: public Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 db1cc9ceb7681bf2a56c0f22acac3a36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: cvlGoU7D5NgJSCiXs6fiOYNXoXM2cDoRE2W6YuHw6SdqFp4EAcpy2g== Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: max-age=2592000 Vary: Origin
2025-03-18 16:51:54 UTC	1084	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 ff 85 56 6d 6f db 36 10 fe 2b b6 3a 08 64 a2 d0 41 f7 02 54 32 63 a0 6b 07 64 e8 d2 a2 59 3f 19 4e c0 4a 67 9b ad 4c 6a 24 e5 cc b3 f5 df 77 a4 5e ec d4 1d 06 18 b2 78 2f e4 dd 3d cf 1d 35 5d bb 4d 79 33 5d 83 28 6e a6 36 37 b2 72 37 e3 65 ad 72 27 b5 22 74 bf 15 66 04 89 4b 44 62 12 95 68 1e 39 53 5b 07 2c d7 ca 82 72 2c 4a 24 1f cc a1 b5 47 6b be 6f 12 e0 82 3d d6 a6 e4 90 c9 25 01 4e 70 f9 57 0d 66 c7 81 19 a8 4a 91 03 99 3c cc 1f b2 d9 8b c5 c5 dc 3f 27 49 14 51 7a 54 ce 5f 64 b3 78 71 39 59 25 51 8c 8a a5 36 b8 0d 30 5b 95 d2 11 2f 4a 1c 2e 4b 50 2b b7 ce ae a7 ee ea 2a 6b 23 30 1c e6 6e d1 1b 72 34 54 dc 30 bb 96 4b 47 68 26 e6 6a 71 38 10 ff 87 d2 d6 7d 56 40 ae 0b f8 f4 f1 f6 57 bd a9 b4 c2 dc 88 61 5f b4 54 c1 9f a6 18 Data Ascii: Vmo6+:dAT2ckdY?NJgLj$w^x/=5]My3](n67r7er'"tfKDbh9S[,r,J$Gko=%NpWfJ<?'IQzT_dxq9Y%Q60[/J.KP+*k#0nr4T0KGh&jq8}V@Wa_T

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:51:53 UTC	816	OUT	GET /log?domain=lincolnfinancialgroup.com&country=us&state=&behavior=implied&session=56c7fcdc-0924-4214-bcd4-c6bcdfacbc66&userType=NEW&c=0d07&referer=https://www.mylincolnportal.com&language=en HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.mylincolnportal.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 16:51:54 UTC	541	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 18 Mar 2025 16:51:53 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 d4f777a2d5a6d5aeb7eb6201b41775ea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: oGu_OEWv82J43qXQ1Lx0UXb2RTBb9tsCgOhFbEA80N3YGdI5Sam6Xw== Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin
2025-03-18 16:51:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:51:54 UTC	572	OUT	GET /log?domain=lincolnfinancialgroup.com&country=us&state=&behavior=implied&session=56c7fcdc-0924-4214-bcd4-c6bcdfacbc66&userType=NEW&c=0d07&referer=https://www.mylincolnportal.com&language=en HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 16:51:55 UTC	548	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 18 Mar 2025 16:51:53 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT X-Cache: Hit from cloudfront Via: 1.1 109c7a7f1cf897851e09b16d3030a948.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: doxjUE1DMF9y_hZP7CCwrIyQKx93QAukFSlmFFK2WkUf8gD7aUvarw== Age: 2 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin
2025-03-18 16:51:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:51:54 UTC	847	OUT	GET /bannermsg?action=views&domain=lincolnfinancialgroup.com&behavior=implied&country=us&language=en&rand=0.004297524901565319&session=56c7fcdc-0924-4214-bcd4-c6bcdfacbc66&userType=NEW&referer=https://www.mylincolnportal.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.mylincolnportal.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 16:51:55 UTC	541	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 18 Mar 2025 16:51:55 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 8ac93eaf91328abbc6951d3fbab21e80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: IU9iDjbIlR4HpTKi0Y3BM9DqKIdfMbhXQnILAjnOlrSFA_IRoIYCjg== Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin
2025-03-18 16:51:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:51:54 UTC	604	OUT	GET /get?name=SourceSansPro-Regular.ttf HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive Origin: https://www.mylincolnportal.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.mylincolnportal.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 16:51:55 UTC	545	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 108305 Connection: close Date: Tue, 18 Mar 2025 16:51:55 GMT Content-Encoding: gzip Pragma: public Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 d71acb203a3e8fc7db2c1cf9725d51da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: igzLvtors9fPl8OkIVOoQ6bUkK_ulqQ9dtFQ2-IhsH-wHfpVKNFBOg== Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2025-03-18 16:51:55 UTC	15839	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 ff d4 bd 05 7c 15 47 bf ff ff 9d 99 95 10 20 c1 21 40 76 4f 12 82 bb 04 82 47 90 24 48 48 70 0f 10 34 10 dc 25 b8 5b 70 77 77 87 2a d0 96 b6 40 69 29 2d d2 42 8b 6b a1 c5 a1 a5 e4 f7 99 9d a5 4f da 7b db fb 3c b7 bd ff d7 eb 9f bc de 33 7b 56 66 67 67 be 3a e7 9c 84 18 11 65 a6 14 12 14 5b 27 b2 56 ed ed 99 b7 ae 21 62 07 89 b4 fc 75 62 1b c6 df 9a 33 b8 3d 31 71 91 58 a3 ae 75 e2 9b 84 af db dd e3 06 51 ef f3 44 75 87 37 8c 2f 55 b6 cd f7 5f cb f3 9b a3 95 f6 1d 7b 26 f4 ce 38 38 7b 6b a2 aa 05 88 ca ef ee 92 34 a4 f3 84 e6 d7 72 11 6f 12 49 ac 3f 75 4d 4c e8 94 6f bc f5 3d ce f7 e0 fc 90 ae d8 e1 3d 2e f3 40 6c bf 02 05 ba f6 ec 3f f8 8b f2 b9 27 11 f9 37 26 b2 be 48 4a ee 98 b0 b7 73 b3 d2 e8 e0 6d 22 df ee 3d 13 06 f7 36 4f Data Ascii: \|G !@vOG$HHp4%[pww*@i)-BkO{<3{Vfgg:e['V!bub3=1qXuQDu7/U_{&88{k4roI?uMLo==.@l?'7&HJsm"=6O
2025-03-18 16:51:55 UTC	6547	IN	Data Raw: 23 fe 9b c8 d7 f1 f5 88 0f 36 f2 1d 88 14 16 f3 25 88 19 96 f1 e5 88 1b 56 f2 4d 7c 2b df cc b7 f0 6d f0 f6 25 c4 55 ad a4 b8 a6 95 12 d7 b5 d2 e2 86 56 46 dc d4 ca 8a 5b 5a 39 71 5b 2b 2f ee 68 15 c4 5d 2d 44 dc d3 2a 8a 1f b4 4a e2 be 16 2a 1e 68 95 c5 8f 5a 15 f1 93 56 55 3c 14 8f b4 6a 5a 75 f8 a9 1a e2 89 56 53 3c d5 c2 c4 33 2d 5c 3c d7 22 c4 0b 2d 52 bc d4 6a 89 9f b5 da e2 17 ad 8e b1 c4 58 66 2c 87 8d 58 6f 6c 32 b6 19 db 29 8e 05 52 3c 0b a2 96 ac 28 b5 62 c5 a8 35 2b 4e 7d 58 18 f5 65 e1 34 84 45 d1 08 56 0f 71 6f 03 9a c5 da d1 6c d6 9e e6 b3 ce b4 80 75 a1 85 ac 2b 2d 66 dd 69 09 eb 41 4b 59 12 ad 66 7d 69 0d eb 47 6b 59 7f da c7 26 d0 61 36 9b 3e 60 f3 e8 23 36 9f 8e b1 05 f4 31 5b 48 9f b1 e5 74 8a ad a0 d3 6c 35 7d c5 d6 d1 d7 6c 3d fd c4 Data Ascii: #6%VM\|+m%UVF[Z9q[+/h]-DJhZVU<jZuVS<3-\<"-RjXf,Xol2)R<(b5+N}Xe4EVqolu+-fiAKYf}iGkY&a6>`#61[Htl5}l=
2025-03-18 16:51:55 UTC	10183	IN	Data Raw: 14 9c 17 9c 1d 9c 16 bc 24 38 31 58 11 3c 27 38 2a 38 3c 78 7a b0 7f b0 57 30 19 ec 1a ec 14 8c 05 d3 83 ed 83 6d 82 2d 83 4d 83 8d 82 81 a0 0a fc 12 f8 31 b0 2b f0 55 60 7b e0 c3 c0 96 c0 c6 c0 ba c0 9a c0 73 81 15 81 65 81 25 81 fb 03 b7 07 16 04 e6 06 66 07 66 04 a6 04 2e 0a 4c 0c 54 04 4a 03 a3 03 67 07 86 06 06 04 fa 04 ba 07 12 81 ce 81 78 20 1c e8 18 68 1b 68 15 68 1a 68 10 d0 fe 5f fc bb fd df fa 77 f8 b7 f9 b7 fa 37 f9 d7 fb 5f f1 af f6 af f4 2f f7 2f f5 2f f6 df ed 5f e4 9f e7 9f e3 9f e9 9f ea bf c4 3f c9 5f e5 2f f3 17 fb 47 f8 87 f9 07 f9 fb f9 4f f1 e7 fb 4f f6 67 fb 23 fe e3 fc ed fc ad fd cd fd 4d fc 0d fc 3e bf f0 ed f1 ed f2 7d e1 db e6 db ea db e4 5b ef 7b c5 b7 da b7 d2 b7 dc b7 d4 b7 d8 77 b7 6f 91 6f be ef 7a df 2c df 34 df 65 be c9 Data Ascii: $81X<'8*8<xzW0m-M1+U`{se%ff.LTJgx hhhh_w7_///_?_/GOOg#M>}[{wooz,4e
2025-03-18 16:51:55 UTC	12792	IN	Data Raw: 55 89 e9 d3 0d 5c d4 49 49 3b b7 ba bc 0a 3a 6c d9 98 d2 22 a4 83 2b 18 cb 40 34 44 4b 8b 46 03 ef 10 e2 15 4e 41 0d 5c 1a 27 ad a1 7b 49 c9 be e2 f3 c7 17 1b c1 7c 45 65 a3 70 8a e0 2b 1a e7 20 c1 f1 85 15 45 65 c4 12 71 ca 93 36 a2 a2 70 e4 d8 a2 2a 27 a9 01 5d 51 62 d0 5c ba 82 20 4e 09 ce 22 dc fc 67 3b 2e c2 11 41 b5 01 42 8b 70 83 3a 8b 70 07 43 fd 19 3a 54 a1 a1 23 2d 1a 94 14 69 08 1d 5d 1a 6c 7c 69 75 a5 93 3c ae a4 cc 45 8b ce ad 2e 2c 45 b4 41 4a 95 e0 b2 61 6a ad e0 3a 08 ad 5b 52 3e ca c9 35 b2 1c 3d 7a f5 78 4f f2 11 ae e4 23 5c c9 47 d4 4a 3e c2 93 7c 84 27 f9 08 57 f2 11 b5 92 8f a8 95 7c 84 27 f9 08 4f f2 11 b5 92 8f a8 95 7c 44 5d c9 47 ec 23 f9 88 14 c9 47 d4 4a 3e 82 24 1f 55 56 ee 6c 7c 20 62 24 37 08 49 6e 50 47 72 07 33 92 23 9d 91 Data Ascii: U\II;:l"+@4DKFNA\'{I\|Eep+ Eeq6p*']Qb\ N"g;.ABp:pC:T#-i]l\|iu<E.,EAJaj:[R>5=zxO#\GJ>\|'W\|'O\|D]G#GJ>$UVl\| b$7InPGr3#
2025-03-18 16:51:55 UTC	6396	IN	Data Raw: 23 81 2e ba e5 24 62 23 bf 4f 1c 08 b4 0e 74 bc bd de 9d 57 6f b9 e3 98 b1 42 34 86 97 82 2e 3f 56 e9 ee f7 6a f3 7a 52 72 8c dd 12 03 fb 47 27 76 28 0b 5a 63 ed 42 67 55 2b bf 55 29 dc 56 85 b3 56 87 cf 57 b5 29 82 fd dc 8e 2b 60 7f 56 1f 87 77 a0 55 66 97 af e6 c8 f3 0b 73 e2 ab 83 bd 80 9a a0 ba 61 cf b8 65 3c c5 59 e8 b1 c7 0c d2 50 8a 93 1a 09 75 02 07 de e0 39 f0 cb 13 e4 dc 38 f4 9a a3 a8 c9 d5 78 eb 2e ae b7 e5 37 1e 88 be b1 5a e3 52 ed a7 b4 07 6d 0e 85 8b 08 67 c9 97 b9 f7 ab dc 31 e8 6f d0 cb fe a6 ee 4b f8 56 70 68 b0 02 81 1f 66 75 8f 77 ac c5 bd 73 b8 05 6b c6 7e d8 50 c3 d0 bf ba 1e 17 39 fd 83 8a 40 8b 2a 39 c7 bb 27 7a 5d d8 40 2e f2 da c4 72 b8 4a cf 2e ff f6 47 eb c7 39 89 13 39 cc 77 0e d0 1f 2d db 01 0d cf 26 1d 07 31 d5 90 8b 9a 59 Data Ascii: #.$b#OtWoB4.?VjzRrG'v(ZcBgU+U)VVW)+`VwUfsae<YPu98x.7ZRmg1oKVphfuwsk~P9@*9'z]@.rJ.G99w-&1Y
2025-03-18 16:51:55 UTC	6145	IN	Data Raw: 52 7b c6 71 0f 8c 7a 29 34 23 9e e6 97 c1 46 5f 19 24 89 88 7a 68 a3 13 2b 83 8d ad 2e 03 85 c3 ba 9b e9 47 a0 0c ee 16 f5 31 bf c7 58 5d c1 2f d4 fe 13 ad e7 ed a7 4e ec b9 ff a5 e3 ff ca 00 65 f0 d6 e9 ce c1 f7 71 a0 1d f1 05 5a 12 ad 5f 69 b2 79 31 24 1e e3 3f c6 12 b0 7f 6f 93 47 bd 5a 7b 53 e3 77 f1 66 5f a0 c5 f8 85 af ad 94 68 3f 2c 7a a8 eb 69 c2 27 fc 78 fb 8d 8d b6 da ea 76 64 6a b0 06 99 33 fb df e9 1d 1c 12 ad c2 46 1f 6f ee 76 eb be e5 c9 99 19 de 28 7a bb de 3a 75 a7 b4 0c 5a f5 16 a7 68 76 fc b1 8f 1f ac 2c d8 bb 84 47 ad 3e 80 be f0 2e 9c df 77 d9 4c 6d 24 47 5f 33 27 a7 30 2f 5e 9b bd b7 f7 6f 7f 6b 1f 70 65 de e2 79 da 0f 7b bb 5d c3 75 a1 aa 4e 9c 5f 9b 3d 5f 86 fb ea 7a 65 b6 c9 75 9b 4e 01 fa d9 2f 76 c7 3e 72 c4 ff 6d 7d 6b 00 55 a0 Data Ascii: R{qz)4#F_$zh+.G1X]/NeqZ_iy1$?oGZ{Swf_h?,zi'xvdj3Fov(z:uZhv,G>.wLm$G_3'0/^okpey{]uN_=_zeuN/v>rm}kU
2025-03-18 16:51:55 UTC	12792	IN	Data Raw: 9f 41 2f a2 06 7c 09 04 5e 93 2f 83 de 86 df 3b a0 77 41 eb 41 1b 40 1f 20 8e af 40 b5 f6 61 2d 82 fc 7d 18 fc 7d 58 4b 84 8e 4e c2 ff 28 27 f0 78 35 38 f5 55 70 ea ab e0 d4 57 d1 d6 c8 80 06 a9 41 5b 23 03 5a a4 06 9c fb 2a 38 f7 55 e3 77 e0 ef 1b 41 37 41 26 6e 06 dd 02 ba 15 74 1b e8 76 68 9b fb 51 cf 3e 28 c2 c1 ff 7d a0 55 6a d0 3e c9 10 f3 ff ef 6b 9c fe af a1 fa b9 be 2f 22 c5 87 e8 13 26 a0 5e cd e4 68 41 07 51 22 56 c8 01 72 a4 1c 25 47 cb 31 72 ac 1c 2f 27 c8 89 72 92 9c 2c a7 c8 99 72 91 5c 2c cf 95 4b e4 52 79 9e 5c 26 97 cb 15 72 a5 fc a9 3c 5f 5e 2b 7f 2d 7f 23 7f 2b af 93 d7 cb df c9 df cb 1b e5 1f e4 4d f2 66 79 8b dc 28 37 c9 cd f2 33 f9 b9 dc 25 f7 c8 bd 6a 3e a9 3c 2c 8f ca 5a cd a3 85 68 a1 5a a4 16 e3 ce e7 4e d4 92 38 a7 3b 4d 4b d7 Data Ascii: A/\|^/;wAA@ @a-}}XKN('x58UpWA[#Z*8UwA7A&ntvhQ>(}Uj>k/"&^hAQ"Vr%G1r/'r,r\,KRy\&r<_^+-#+Mfy(73%j><,ZhZN8;MK
2025-03-18 16:51:55 UTC	3592	IN	Data Raw: ef 70 73 f3 b0 17 dc bd 6e d0 37 e4 7d e1 3b 4c e2 f4 91 91 3d 71 e6 95 57 98 f8 9e 91 91 d3 13 cc 77 c0 b3 b1 71 2f 03 ce 65 bc d9 d8 e4 26 71 fe 72 c6 3b 8e d6 f5 29 38 a6 c5 70 3d 28 79 d9 a6 a9 7c 6c 31 e8 2a cb d4 e5 f5 e9 1a 24 16 6b fa 14 28 63 5f 20 09 22 f9 da 69 6f 98 fb 34 a4 fc 93 7c 9a a9 3d 15 e1 3e ed 00 a7 c3 b6 d9 b9 14 0c 5a d9 53 78 5a 0b cf 21 d0 16 84 15 b8 0a 15 12 fd 63 7e 65 28 73 97 37 cc 91 75 ea 97 dc 42 27 1a 6c 9e ae cd e0 b2 94 84 7c 7d b6 24 3b 21 4f bb 31 0d 85 44 85 57 f1 6a 1f 83 7f 8d c0 da cb 39 7b 88 5a cd 63 d3 23 41 73 45 65 ad da 16 03 b1 c9 8d e5 5d 72 49 7b 47 fe 65 e4 7b 82 9f 79 11 f6 77 49 1e 66 1d e4 56 e1 82 52 f6 c1 60 ce 97 f4 5c b2 f6 ac b5 43 a1 64 32 34 04 de a8 6b 0b c5 32 e5 3f 78 e6 99 7f 7b 9b 9a 1c Data Ascii: psn7};L=qWwq/e&qr;)8p=(y\|l1*$k(c_ "io4\|=>ZSxZ!c~e(s7uB'l\|}$;!O1DWj9{Zc#AsEe]rI{Ge{ywIfVR`\Cd24k2?x{
2025-03-18 16:51:55 UTC	16384	IN	Data Raw: ed 16 ab 3b ab 18 ce 04 a3 a5 92 f2 04 0a fa d3 d7 84 35 5a 14 f4 c7 80 76 26 eb 6c d6 d6 85 2d e8 25 2b df 62 2f 38 0c ad 0b 94 f3 84 0d 7c 67 8f a3 52 4c 18 65 c7 43 99 4d cb c5 98 21 78 1a 80 85 ce 5a 6d 55 b3 b7 25 17 68 19 99 f7 d6 ad 99 31 81 7e a9 77 fd 68 4b 43 87 a7 a7 b3 f6 f1 3a 53 83 ba 42 ad 2c 2e 69 9e 1f 89 1c 38 6b 93 15 30 4c 3a 6d de 74 d6 d9 81 68 c6 5a 54 e6 f1 6b 7b d8 db 3d 43 e0 38 8e c5 17 49 e9 4c c2 a1 0d 8e 42 0c 02 38 9f 11 83 86 26 67 bb 2b cb 48 07 e4 62 fb 58 a8 27 f9 c8 e8 7f 1d ee ce a4 9a 53 f9 6f 83 0d 86 4e fb 69 91 e8 86 b9 7c 0d f1 9f bd 88 fd 67 55 dc 89 02 e7 25 43 27 e6 01 7c 62 0e cd 1e 23 03 a4 f3 3b 77 ce a3 af 96 8c e4 6d 49 da 6f 09 9a 98 b7 19 53 88 ba cc 98 3b 0e 5d 73 cd a1 53 f7 b5 1e d8 b2 e5 40 2b b9 c1 Data Ascii: ;5Zv&l-%+b/8\|gRLeCM!xZmU%h1~whKC:SB,.i8k0L:mthZTk{=C8ILB8&g+HbX'SoNi\|gU%C'\|b#;wmIoS;]sS@+
2025-03-18 16:51:55 UTC	7435	IN	Data Raw: 7c 10 af c4 51 7b fd 8a 2a d7 45 58 82 20 57 e8 ab e1 0a bd aa b0 46 47 8a 26 5c b8 50 5f ce 8a 80 3a bc 5a 07 87 5f 0f dd c0 a0 a8 b9 1e a7 fe 2b 8a 1a 16 cd a5 4b 70 d6 1e c6 7b 8c bf 51 54 96 86 9f a1 c2 33 31 7e 3b 85 1b 61 eb 5e 44 71 51 16 5d 8a d2 78 db 11 0e d7 17 5f c2 af 9b a9 35 96 9f 6b 84 f2 86 30 20 46 de 7f 96 b4 2b 56 0d 1e 56 1c fb db 03 46 57 10 88 3f e9 75 4f 5f 9a 29 d8 5a b1 e3 72 ff 9a e2 53 e9 02 7f 87 f8 b3 34 de 5d c0 e7 3c 68 57 82 c6 67 40 9a 2e e1 3f 70 3a 6f 52 e9 d8 e9 79 a2 14 0f 97 e1 6f d2 f8 48 19 7e 9c c6 53 05 1c d6 ec 3f 70 be 6f 96 b7 33 0e ff 2c 8d 77 d3 e1 3d 65 e1 4b db bf 14 2f b4 3f b9 af 81 e8 7c 8b a2 d3 50 e0 8f 65 78 6b 19 fe 1a 8d 27 ca f0 e3 34 9e 2a c3 9f a0 f1 de 32 fc 76 1a 6f 2b c3 3f a7 f1 a1 32 fc 4d Data Ascii: \|Q{EX WFG&\P_:Z_+Kp{QT31~;a^DqQ]x_5k0 F+VVFW?uO_)ZrS4]<hWg@.?p:oRyoH~S?po3,w=eK/?\|Pexk'42vo+?2M

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:51:55 UTC	603	OUT	GET /bannermsg?action=views&domain=lincolnfinancialgroup.com&behavior=implied&country=us&language=en&rand=0.004297524901565319&session=56c7fcdc-0924-4214-bcd4-c6bcdfacbc66&userType=NEW&referer=https://www.mylincolnportal.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 16:51:56 UTC	548	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 18 Mar 2025 16:51:55 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT X-Cache: Hit from cloudfront Via: 1.1 da4de4427d18bee1d3254f1bbdad25f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: aIegggriT6Fa-qyKDJvMX4cB9j13i_Mde9M2NizjHI8yOYzwpg_uLQ== Age: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin
2025-03-18 16:51:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:51:57 UTC	579	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiJo8sBCIWgzQEI9s/OAQiA1s4BCNLgzgEIr+TOAQji5M4BCOXkzgEIheXOAQiL5c4B Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 16:51:57 UTC	1303	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 16:51:57 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-VqXeZv2EUB59fP-CW1qzCQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-18 16:51:57 UTC	87	IN	Data Raw: 64 33 62 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 74 68 65 20 76 6f 69 63 65 20 62 61 74 74 6c 65 73 20 73 65 61 73 6f 6e 20 32 37 22 2c 22 74 67 6c 20 67 6f 6c 66 20 70 6c 61 79 6f 66 66 20 73 63 68 65 64 75 6c 65 22 2c 22 70 6c 61 6e 65 20 63 72 61 73 68 20 72 Data Ascii: d3b)]}'["",["the voice battles season 27","tgl golf playoff schedule","plane crash r
2025-03-18 16:51:57 UTC	1390	IN	Data Raw: 6f 61 74 61 6e 20 68 6f 6e 64 75 72 61 73 22 2c 22 66 64 61 20 72 65 74 75 72 6e 20 74 6f 20 6f 66 66 69 63 65 20 63 68 61 6f 73 22 2c 22 64 69 73 6e 65 79 20 73 6e 6f 77 20 77 68 69 74 65 20 6d 6f 76 69 65 22 2c 22 73 61 6e 20 66 72 61 6e 63 69 73 63 6f 20 34 39 65 72 73 20 6e 65 77 73 22 2c 22 64 6f 77 20 6a 6f 6e 65 73 20 73 74 6f 63 6b 20 6d 61 72 6b 65 74 73 22 2c 22 68 61 72 76 61 72 64 20 75 6e 69 76 65 72 73 69 74 79 20 66 72 65 65 20 74 75 69 74 69 6f 6e 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a Data Ascii: oatan honduras","fda return to office chaos","disney snow white movie","san francisco 49ers news","dow jones stock markets","harvard university free tuition"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":
2025-03-18 16:51:57 UTC	1390	IN	Data Raw: 5a 6c 4e 32 56 6e 68 73 52 6d 64 55 4f 45 70 6c 56 6a 46 30 57 55 67 76 62 32 35 44 4e 6b 4a 6d 52 57 56 56 4b 32 4e 71 56 54 5a 34 63 6b 78 4e 57 6d 6c 7a 52 6d 31 44 63 31 52 32 57 55 46 74 64 30 35 31 56 30 52 46 63 54 56 4c 62 6b 31 5a 4f 48 68 78 57 54 46 71 61 32 6c 59 55 31 49 7a 53 48 49 35 65 6d 68 51 51 6c 56 7a 59 7a 56 36 52 30 46 31 57 6e 42 4f 53 6c 5a 79 57 55 31 55 64 32 73 79 56 57 51 34 54 55 6b 32 4d 58 52 30 64 55 70 6f 5a 6c 52 6d 62 47 70 51 57 58 5a 46 61 31 5a 61 54 6b 68 54 55 6a 42 72 65 46 68 56 54 6c 52 4c 64 7a 49 35 63 31 56 6d 4f 57 46 76 4e 6b 64 4e 54 45 70 51 53 58 4e 77 57 47 30 7a 52 6d 4a 30 4d 58 68 78 5a 6b 70 68 62 7a 52 6e 54 45 74 54 5a 6b 56 33 65 6e 63 78 52 6b 68 59 53 31 4e 57 51 33 6c 77 59 6d 67 34 64 30 5a Data Ascii: ZlN2VnhsRmdUOEplVjF0WUgvb25DNkJmRWVVK2NqVTZ4ckxNWmlzRm1Dc1R2WUFtd051V0RFcTVLbk1ZOHhxWTFqa2lYU1IzSHI5emhQQlVzYzV6R0F1WnBOSlZyWU1Ud2syVWQ4TUk2MXR0dUpoZlRmbGpQWXZFa1ZaTkhTUjBreFhVTlRLdzI5c1VmOWFvNkdNTEpQSXNwWG0zRmJ0MXhxZkphbzRnTEtTZkV3encxRkhYS1NWQ3lwYmg4d0Z
2025-03-18 16:51:57 UTC	527	IN	Data Raw: 49 72 4d 6b 74 68 53 30 78 4e 53 56 6c 5a 62 6a 68 73 4d 30 56 6e 57 47 64 51 65 58 5a 5a 51 6c 52 69 4e 30 52 6d 4d 7a 63 30 62 55 31 7a 63 57 68 47 51 6e 42 4f 64 47 55 72 4b 32 35 70 53 47 45 7a 4d 58 68 5a 4b 30 63 32 53 6d 35 77 65 45 39 76 55 54 59 33 57 45 5a 74 4e 44 63 35 4e 7a 68 79 4e 47 38 7a 63 31 59 7a 53 6a 6c 52 51 6d 35 79 53 31 70 61 4e 6e 46 76 56 30 4a 5a 56 31 4a 54 4b 33 4e 54 51 57 74 46 52 47 34 35 4e 31 67 72 4b 30 4e 32 52 33 46 33 63 6d 73 77 5a 45 70 57 5a 57 4e 32 65 45 78 59 56 32 39 52 59 6b 6c 35 4d 69 74 69 4d 33 5a 6e 4c 30 78 4c 4e 6d 74 77 53 6c 6f 77 63 6b 70 76 61 32 46 4e 59 31 46 69 56 6e 4d 31 63 32 56 68 61 54 4d 34 4f 57 4e 6d 59 79 74 36 55 45 78 6a 4d 33 6c 78 63 47 39 4c 55 33 52 44 54 54 46 70 64 47 78 7a 56 Data Ascii: IrMkthS0xNSVlZbjhsM0VnWGdQeXZZQlRiN0RmMzc0bU1zcWhGQnBOdGUrK25pSGEzMXhZK0c2Sm5weE9vUTY3WEZtNDc5NzhyNG8zc1YzSjlRQm5yS1paNnFvV0JZV1JTK3NTQWtFRG45N1grK0N2R3F3cmswZEpWZWN2eExYV29RYkl5MitiM3ZnL0xLNmtwSlowckpva2FNY1FiVnM1c2VhaTM4OWNmYyt6UExjM3lxcG9LU3RDTTFpdGxzV
2025-03-18 16:51:57 UTC	92	IN	Data Raw: 35 36 0d 0a 5a 63 31 42 56 5a 48 4e 68 51 6d 31 71 55 45 74 61 63 46 56 71 51 57 74 68 4c 32 31 4a 63 54 4e 44 61 32 52 52 54 6a 6b 72 57 6e 68 75 62 6d 6c 46 5a 57 52 59 65 56 42 46 53 45 6c 53 53 54 46 50 62 32 49 33 55 6e 42 31 55 6a 63 7a 64 7a 6b 34 55 47 39 6e 65 0d 0a Data Ascii: 56Zc1BVZHNhQm1qUEtacFVqQWthL21JcTNDa2RRTjkrWnhubmlFZWRYeVBFSElSSTFPb2I3UnB1Ujczdzk4UG9ne
2025-03-18 16:51:57 UTC	1390	IN	Data Raw: 31 35 33 61 0d 0a 6d 6b 33 56 53 38 76 4f 57 73 39 4f 68 64 6b 61 58 4e 75 5a 58 6b 67 63 32 35 76 64 79 42 33 61 47 6c 30 5a 53 42 74 62 33 5a 70 5a 55 6f 48 49 7a 68 6c 4e 7a 4d 7a 4f 46 4a 4b 5a 33 4e 66 63 33 4e 77 50 57 56 4b 65 6d 6f 30 64 46 5a 51 4d 58 70 6a 4d 48 70 4e 62 33 52 30 54 46 4e 76 53 32 70 42 4d 31 6c 51 55 56 4e 55 4f 47 74 7a 65 6d 74 31 64 46 5a 44 61 6b 39 35 65 54 6c 59 53 30 31 66 53 55 78 46 62 46 5a 35 54 54 42 32 65 54 42 33 52 6b 46 42 56 45 78 45 57 6a 68 77 46 41 5c 75 30 30 33 64 5c 75 30 30 33 64 22 2c 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 67 6f 6f 67 6c 65 3a 65 6e 74 69 74 79 69 6e 66 6f 22 3a 22 43 67 67 76 62 53 38 77 4d 32 74 7a 65 52 Data Ascii: 153amk3VS8vOWs9OhdkaXNuZXkgc25vdyB3aGl0ZSBtb3ZpZUoHIzhlNzMzOFJKZ3Nfc3NwPWVKemo0dFZQMXpjMHpNb3R0TFNvS2pBM1lQUVNUOGtzemt1dFZDak95eTlYS01fSUxFbFZ5TTB2eTB3RkFBVExEWjhwFA\u003d\u003d","zl":10002},{"zl":10002},{"zl":10002},{"google:entityinfo":"CggvbS8wM2tzeR
2025-03-18 16:51:57 UTC	1390	IN	Data Raw: 30 64 46 4d 6d 46 35 5a 47 70 31 56 31 42 6b 64 48 49 32 59 57 68 57 61 57 59 30 64 54 56 6d 65 6d 56 73 5a 56 56 7a 4d 6e 70 4d 55 45 31 6f 53 30 51 34 51 55 55 7a 5a 55 46 34 59 6a 56 6f 54 7a 46 44 63 48 59 72 5a 6a 6c 72 53 44 52 33 54 31 70 48 5a 46 51 31 62 69 74 4c 53 56 51 32 63 33 4a 47 55 58 46 4c 4f 46 5a 32 51 6d 46 53 55 33 42 56 53 30 68 57 5a 6e 46 72 62 55 73 31 56 53 38 7a 56 58 70 52 63 30 52 4b 56 53 74 61 56 31 56 73 56 56 55 76 5a 31 6c 42 4c 30 39 71 65 45 64 79 54 6a 42 44 4d 6b 68 58 61 44 51 76 53 30 35 33 51 32 73 34 59 54 42 43 52 47 31 4d 65 6c 49 7a 4d 57 6f 77 65 6a 4e 4a 51 56 70 6e 51 32 68 69 61 32 4d 77 5a 6b 68 47 57 6b 77 31 5a 31 42 59 55 7a 59 7a 4e 33 52 55 52 32 56 6f 5a 54 5a 50 55 55 46 68 4f 56 68 45 64 7a 42 51 Data Ascii: 0dFMmF5ZGp1V1BkdHI2YWhWaWY0dTVmemVsZVVzMnpMUE1oS0Q4QUUzZUF4YjVoTzFDcHYrZjlrSDR3T1pHZFQ1bitLSVQ2c3JGUXFLOFZ2QmFSU3BVS0hWZnFrbUs1VS8zVXpRc0RKVStaV1VsVVUvZ1lBL09qeEdyTjBDMkhXaDQvS053Q2s4YTBCRG1MelIzMWowejNJQVpnQ2hia2MwZkhGWkw1Z1BYUzYzN3RUR2VoZTZPUUFhOVhEdzBQ
2025-03-18 16:51:57 UTC	1390	IN	Data Raw: 49 4e 55 78 5a 56 6b 56 71 62 6e 63 33 59 7a 52 71 64 6d 52 7a 64 6c 4e 79 55 58 4a 54 51 31 5a 6d 64 58 56 76 62 45 77 7a 55 44 4e 4a 63 44 5a 49 52 54 46 6a 53 6b 39 48 55 47 49 35 54 54 52 36 64 33 6c 55 59 33 5a 61 64 6b 74 68 65 45 5a 36 59 33 4a 31 57 57 5a 78 5a 32 6c 6d 5a 57 59 79 55 55 56 51 53 58 46 36 4e 6d 52 58 63 6c 49 72 5a 55 52 5a 4f 45 63 30 54 7a 42 51 56 69 74 31 62 57 34 77 4e 57 31 7a 4e 55 39 55 63 46 4a 4f 4e 6d 55 78 4f 57 52 32 64 30 77 30 52 46 42 58 65 6d 51 35 55 53 39 49 4c 31 70 79 54 7a 42 56 61 7a 46 59 63 30 39 54 56 57 77 34 51 6a 5a 47 54 45 56 77 61 54 4e 51 56 55 68 47 51 57 4d 72 4d 32 56 55 4e 30 46 6f 63 58 45 76 63 54 46 34 61 58 6c 35 61 54 52 46 4e 44 6c 4f 54 7a 4a 76 56 6a 56 36 4e 6c 64 72 55 6d 31 49 65 6d Data Ascii: INUxZVkVqbnc3YzRqdmRzdlNyUXJTQ1ZmdXVvbEwzUDNJcDZIRTFjSk9HUGI5TTR6d3lUY3ZadktheEZ6Y3J1WWZxZ2lmZWYyUUVQSXF6NmRXclIrZURZOEc0TzBQVit1bW4wNW1zNU9UcFJONmUxOWR2d0w0RFBXemQ5US9IL1pyTzBVazFYc09TVWw4QjZGTEVwaTNQVUhGQWMrM2VUN0FocXEvcTF4aXl5aTRFNDlOTzJvVjV6NldrUm1Iem
2025-03-18 16:51:57 UTC	1272	IN	Data Raw: 57 35 46 57 54 4e 7a 4e 48 42 6c 63 7a 45 78 53 45 51 76 4e 47 5a 47 56 6b 64 52 55 69 74 51 62 33 4e 71 57 6a 46 45 55 55 31 72 59 55 68 72 4d 57 77 31 64 6e 5a 6c 62 6b 70 34 4e 32 5a 57 53 58 55 30 4d 48 6c 49 52 47 5a 4d 56 47 52 74 51 33 64 54 62 57 31 74 53 54 64 50 57 54 6b 7a 51 7a 6c 69 61 32 64 4b 57 55 55 72 59 6e 4d 72 56 46 64 42 64 45 68 6c 56 7a 46 4a 61 54 42 6f 57 54 4a 6b 4d 7a 46 49 5a 46 56 32 56 6e 45 77 5a 6c 55 35 55 33 5a 30 62 46 41 31 63 54 4a 4d 4e 33 4a 4c 51 6b 64 77 51 57 59 78 4c 31 64 53 5a 58 51 30 5a 44 56 50 57 45 78 68 54 6b 31 46 4e 57 4a 6c 55 46 4a 79 64 54 49 35 55 56 68 56 57 6a 55 76 57 6a 56 7a 64 6d 31 32 55 6a 42 76 4d 6e 56 61 52 31 68 6e 52 46 56 6b 54 6b 6b 35 4c 32 73 30 5a 6b 64 6d 54 47 56 57 4e 55 56 50 Data Ascii: W5FWTNzNHBlczExSEQvNGZGVkdRUitQb3NqWjFEUU1rYUhrMWw1dnZlbkp4N2ZWSXU0MHlIRGZMVGRtQ3dTbW1tSTdPWTkzQzlia2dKWUUrYnMrVFdBdEhlVzFJaTBoWTJkMzFIZFV2VnEwZlU5U3Z0bFA1cTJMN3JLQkdwQWYxL1dSZXQ0ZDVPWExhTk1FNWJlUFJydTI5UVhVWjUvWjVzdm12UjBvMnVaR1hnRFVkTkk5L2s0ZkdmTGVWNUVP
2025-03-18 16:51:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:51:57 UTC	578	OUT	GET /logger-1.min.js HTTP/1.1 Host: cdn.lrkt-in.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.mylincolnportal.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 16:51:57 UTC	1238	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 16:51:57 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * Cache-Control: public, max-age=14400 cross-origin-resource-policy: cross-origin etag: W/"0fe562bd43b5bbfddcf96bfa4158b4d5cbbd22639dbc52f1e03d5e19da442de3-br" last-modified: Tue, 18 Mar 2025 16:40:10 GMT strict-transport-security: max-age=31556926 x-served-by: cache-lga21956-LGA x-cache: HIT x-cache-hits: 1 x-timer: S1742316170.246702,VS0,VE79 vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 246 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ga47z1z%2B%2BoX94nYKyNDB%2FiKFUGYLIuiVYonRx7vMr%2BVuUFOjAq9ARIpiEbijZKezu4ZkONIMn5n9nU%2FCs83OHEXzqiKpAKcw%2F52CbhIWmgXRI3edlXP%2FpdwqlYUwmuSb5uo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92263cdc1902f569-EWR server-timing: cfL4;desc="?proto=TCP&rtt=2058&min_rtt=2056&rtt_var=775&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1150&delivery_rate=1407228&cwnd=108&unsent_bytes=0&cid=dacafda516fb62c7&ts=160&x=0"
2025-03-18 16:51:57 UTC	131	IN	Data Raw: 37 62 35 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 31 32 37 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 36 34 38 33 36 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 65 6e 63 6f 64 Data Ascii: 7b59!function(){var e={12706:function(e,t,r){"use strict";var n=r(64836);Object.defineProperty(t,"__esModule",{value:!0}),t.encod
2025-03-18 16:51:57 UTC	1369	IN	Data Raw: 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 70 28 65 29 29 7d 2c 74 2e 65 6e 63 6f 64 65 41 73 54 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 70 28 65 29 7d 2c 74 2e 64 65 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 3c 30 29 72 65 74 75 72 6e 20 6e 28 65 29 3b 76 61 72 20 74 3d 6e 65 77 20 41 72 72 61 79 28 65 2e 6c 65 6e 67 74 68 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 20 74 3f 74 5b 65 5d 3a 74 5b 65 5d 3d 6e 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 69 66 28 74 3c 30 29 7b 69 Data Ascii: e=function(e){return JSON.stringify(p(e))},t.encodeAsTable=function(e){return p(e)},t.decode=function(e){return function(e){if("number"==typeof e&&e<0)return n(e);var t=new Array(e.length);function r(e){return e in t?t[e]:t[e]=n(e)}function n(t){if(t<0){i
2025-03-18 16:51:57 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 20 6e 28 65 29 7b 73 77 69 74 63 68 28 28 30 2c 6f 2e 64 65 66 61 75 6c 74 29 28 65 29 29 7b 63 61 73 65 22 75 6e 64 65 66 69 6e 65 64 22 3a 72 65 74 75 72 6e 20 69 3b 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 69 66 28 69 73 4e 61 4e 28 65 29 29 72 65 74 75 72 6e 20 73 3b 69 66 28 21 69 73 46 69 6e 69 74 65 28 65 29 29 72 65 74 75 72 6e 20 65 3c 30 3f 63 3a 75 7d 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 72 3f 76 6f 69 64 20 30 3d 3d 3d 28 6e 3d 72 2e 67 65 74 28 65 29 29 26 26 28 6e 3d 74 2e 70 75 73 68 28 65 29 2d 31 2c 72 2e 73 65 74 28 65 2c 6e 29 29 3a 28 6e 3d 74 2e 69 6e 64 65 78 4f 66 28 65 29 29 3c 30 26 26 28 6e 3d 74 2e 70 75 73 68 28 65 29 2d 31 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 76 61 72 20 74 3d 65 3b 69 66 28 65 Data Ascii: ction n(e){switch((0,o.default)(e)){case"undefined":return i;case"number":if(isNaN(e))return s;if(!isFinite(e))return e<0?c:u}var n;return r?void 0===(n=r.get(e))&&(n=t.push(e)-1,r.set(e,n)):(n=t.indexOf(e))<0&&(n=t.push(e)-1),n}function f(e){var t=e;if(e
2025-03-18 16:51:57 UTC	1369	IN	Data Raw: 6f 6e 73 74 72 75 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 6e 65 77 20 52 65 67 45 78 70 28 65 5b 30 5d 2c 65 5b 31 5d 29 7d 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 65 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 66 72 6f 6d 26 26 66 28 22 53 65 74 22 2c 7b 64 65 63 6f 6e 73 74 72 75 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 5b 6f 62 6a 65 63 74 20 53 65 74 5d 22 3d 3d 3d 64 2e 63 61 6c 6c 28 65 29 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 2c 72 65 63 6f 6e 73 74 72 75 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 65 77 20 53 65 74 3b 65 2e 66 6f 72 45 61 63 68 28 74 68 69 73 Data Ascii: onstruct:function(e){return e&&new RegExp(e[0],e[1])}}),"function"==typeof Set&&"function"==typeof Array.from&&f("Set",{deconstruct:function(e){if("[object Set]"===d.call(e))return Array.from(e)},reconstruct:function(e){if(!e)return new Set;e.forEach(this
2025-03-18 16:51:57 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 29 2e 61 73 73 65 74 43 61 70 74 75 72 65 2c 6f 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 7b 7d 3a 6e 3b 28 30 2c 61 2e 64 65 66 61 75 6c 74 29 28 74 68 69 73 2c 65 29 2c 74 68 69 73 2e 63 61 70 74 75 72 65 50 65 72 66 6f 72 6d 61 6e 63 65 45 6e 74 72 79 3d 28 30 2c 75 2e 70 72 6f 74 65 63 74 46 75 6e 63 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 29 69 66 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 3d 3d 3d 65 2e 65 6e 74 72 79 54 79 70 65 29 72 2e 5f 61 64 64 52 65 73 Data Ascii: function(){function e(t){var r=this,n=(arguments.length>1&&void 0!==arguments[1]?arguments[1]:{}).assetCapture,o=void 0===n?{}:n;(0,a.default)(this,e),this.capturePerformanceEntry=(0,u.protectFunc)((function(e){if(e)if("navigation"===e.entryType)r._addRes
2025-03-18 16:51:57 UTC	1369	IN	Data Raw: 74 68 29 28 6e 2c 22 62 6c 6f 62 3a 22 29 29 7b 76 61 72 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 6f 2e 68 72 65 66 3d 6e 3b 76 61 72 20 69 2c 61 3d 7b 69 6e 69 74 69 61 74 6f 72 54 79 70 65 3a 74 2c 6e 61 6d 65 3a 6f 2e 68 72 65 66 2c 73 74 61 72 74 54 69 6d 65 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 2c 73 3d 28 72 2e 5f 6c 6f 67 67 65 72 2e 67 65 74 43 6f 6e 66 69 67 28 22 6c 72 2e 6e 65 74 77 6f 72 6b 2e 50 65 72 66 52 65 73 6f 75 72 63 65 45 76 65 6e 74 22 29 7c 7c 7b 7d 29 2e 72 65 71 75 65 73 74 53 61 6e 69 74 69 7a 65 72 2c 63 3d 76 6f 69 64 20 30 3d 3d 3d 73 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 3a 73 3b 74 72 79 7b 69 3d 63 28 6c 28 6c 28 7b 7d 2c 61 29 2c 7b 7d 2c 7b 75 Data Ascii: th)(n,"blob:")){var o=document.createElement("a");o.href=n;var i,a={initiatorType:t,name:o.href,startTime:Date.now()},s=(r._logger.getConfig("lr.network.PerfResourceEvent")\|\|{}).requestSanitizer,c=void 0===s?function(e){return e}:s;try{i=c(l(l({},a),{},{u
2025-03-18 16:51:57 UTC	1369	IN	Data Raw: 65 2c 5b 7b 6b 65 79 3a 22 73 65 74 50 65 72 66 6f 72 6d 61 6e 63 65 53 74 61 74 75 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 5f 69 73 50 65 72 66 6f 72 6d 61 6e 63 65 45 6e 61 62 6c 65 64 3d 65 2c 74 68 69 73 2e 5f 62 72 6f 77 73 65 72 4c 6f 61 64 54 69 6d 65 3d 74 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 44 6f 6d 53 74 61 74 75 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 69 73 44 6f 6d 45 6e 61 62 6c 65 64 3d 21 31 3d 3d 3d 74 68 69 73 2e 5f 69 73 44 69 73 61 62 6c 65 64 26 26 21 30 3d 3d 3d 74 68 69 73 2e 5f 69 73 50 65 72 66 6f 72 6d 61 6e 63 65 45 6e 61 62 6c 65 64 26 26 65 2c 74 68 69 73 2e 5f 69 73 44 6f 6d 45 6e 61 62 6c 65 64 3f 74 68 69 73 2e 5f 73 63 68 65 64 75 6c 65 43 Data Ascii: e,[{key:"setPerformanceStatus",value:function(e,t){this._isPerformanceEnabled=e,this._browserLoadTime=t}},{key:"setDomStatus",value:function(e){this._isDomEnabled=!1===this._isDisabled&&!0===this._isPerformanceEnabled&&e,this._isDomEnabled?this._scheduleC
2025-03-18 16:51:57 UTC	1369	IN	Data Raw: 2e 5f 63 6c 6f 73 65 64 52 65 71 75 65 73 74 73 3d 74 7d 7d 2c 7b 6b 65 79 3a 22 5f 61 64 64 52 65 73 6f 75 72 63 65 45 76 65 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 32 30 30 2c 6e 3d 22 6e 61 76 69 67 61 74 69 6f 6e 22 3d 3d 3d 65 2e 65 6e 74 72 79 54 79 70 65 3f 22 6e 61 76 69 67 61 74 69 6f 6e 22 3a 65 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 3b 74 68 69 73 2e 5f 6c 6f 67 67 65 72 2e 61 64 64 45 76 65 6e 74 28 22 6c 72 2e 6e 65 74 77 6f 72 6b 2e 50 65 72 66 52 65 73 6f 75 72 63 65 45 76 65 6e 74 22 2c 28 66 75 6e 63 74 69 6f Data Ascii: ._closedRequests=t}},{key:"_addResourceEvent",value:function(e){var t=this,r=arguments.length>1&&void 0!==arguments[1]?arguments[1]:200,n="navigation"===e.entryType?"navigation":e.initiatorType;this._logger.addEvent("lr.network.PerfResourceEvent",(functio
2025-03-18 16:51:57 UTC	1369	IN	Data Raw: 73 65 64 52 65 71 75 65 73 74 73 3d 5b 5d 2c 74 68 69 73 2e 5f 63 6c 6f 73 69 6e 67 4c 6f 6f 70 54 69 6d 65 72 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 5f 63 6c 6f 73 69 6e 67 4c 6f 6f 70 54 69 6d 65 72 29 2c 74 68 69 73 2e 5f 63 6c 6f 73 69 6e 67 4c 6f 6f 70 54 69 6d 65 72 3d 6e 75 6c 6c 29 7d 7d 5d 29 2c 65 7d 28 29 3b 74 2e 64 65 66 61 75 6c 74 3d 64 7d 2c 36 36 30 34 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 55 54 4d 5f 50 41 52 41 4d 5f 4b 45 59 3d 74 2e 55 54 4d 5f 50 41 52 41 4d 45 54 45 52 5f 54 4f 5f 45 56 45 4e 54 5f 4b 45 59 5f Data Ascii: sedRequests=[],this._closingLoopTimer&&(clearTimeout(this._closingLoopTimer),this._closingLoopTimer=null)}}]),e}();t.default=d},66044:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.UTM_PARAM_KEY=t.UTM_PARAMETER_TO_EVENT_KEY_
2025-03-18 16:51:57 UTC	1369	IN	Data Raw: 28 31 35 32 36 38 29 29 2c 75 3d 6e 28 72 28 38 31 39 32 36 29 29 2c 63 3d 6e 28 72 28 36 33 35 36 29 29 2c 6c 3d 6e 28 72 28 35 38 35 37 35 29 29 2c 66 3d 6e 28 72 28 36 33 32 33 31 29 29 2c 64 3d 72 28 37 35 33 37 33 29 2c 70 3d 72 28 38 30 38 37 31 29 7d 2c 38 31 39 32 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 6e 2e 61 64 64 4c 69 73 74 65 6e 65 72 29 28 22 63 6f 70 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 5f 64 65 61 64 43 6c 69 63 6b 73 4d 6f 6e 69 74 6f Data Ascii: (15268)),u=n(r(81926)),c=n(r(6356)),l=n(r(58575)),f=n(r(63231)),d=r(75373),p=r(80871)},81926:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){return(0,n.addListener)("copy",(function(){e._deadClicksMonito

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:51:57 UTC	892	OUT	GET /portal-status HTTP/1.1 Host: www.mylincolnportal.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mylincolnportal.com/customer/public/migration-help Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: utag_main=v_id:0195aa2b2dde0012ae4755bd8e5b0506f003e06700918$_sn:1$_se:1%3Bexp-session$_ss:1%3Bexp-session$_st:1742318511392%3Bexp-session$ses_id:1742316711392%3Bexp-session$_pn:1%3Bexp-session; TAsessionID=56c7fcdc-0924-4214-bcd4-c6bcdfacbc66\|NEW; notice_behavior=implied,eu
2025-03-18 16:51:57 UTC	392	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 16:51:57 GMT Content-Type: application/json Content-Length: 63 Connection: close Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY X-XSS-Protection: 0 Referrer-Policy: no-referrer
2025-03-18 16:51:57 UTC	63	IN	Data Raw: 7b 22 6d 61 69 6e 74 65 6e 61 6e 63 65 4d 6f 64 65 22 3a 66 61 6c 73 65 2c 22 6d 61 69 6e 74 65 6e 61 6e 63 65 4d 6f 64 65 42 61 63 6b 64 6f 6f 72 41 63 63 65 73 73 22 3a 66 61 6c 73 65 7d Data Ascii: {"maintenanceMode":false,"maintenanceModeBackdoorAccess":false}

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.mylincolnportal.com/customer/public/migration-help

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

HIPS / PFW / Operating System Protection Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Static File Info

Network Behavior

Network Port Distribution

Windows Analysis Report
https://www.mylincolnportal.com/customer/public/migration-help

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:51:57 UTC	616	OUT	GET /utag/lfg/mlp/prod/utag.112.js?utv=ut4.51.202410190204 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.mylincolnportal.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 16:51:58 UTC	579	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 16629 Connection: close Date: Tue, 18 Mar 2025 16:51:59 GMT Last-Modified: Thu, 19 Dec 2024 12:36:06 GMT ETag: "702fe3fb90d6c6b802038145b8fffea4" x-amz-server-side-encryption: AES256 x-amz-version-id: L2S2FZoD_C5pXJUkPJT73ZttgTl3NFvJ Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 32803d0ba3af70cddd7db80d2fd00608.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: 3fEMbH6p3UMj8Y2i1v6IL5B5Jn31o3jz_3yYdX_unzPT92Q8FRj-GA== Cache-Control: max-age=300
2025-03-18 16:51:58 UTC	8493	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 31 32 20 75 74 34 2e 30 2e 32 30 32 34 31 32 31 39 31 32 33 35 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 75 2e 65 76 3d 7b 22 76 69 65 77 22 3a 31 2c 22 6c 69 6e 6b 22 3a 31 7d 3b 75 2e 6d 61 70 3d 7b 22 67 61 34 5f 61 63 63 6f 75 6e 74 22 3a 22 6d 65 61 73 75 72 65 6d 65 6e 74 5f 69 64 22 2c 22 75 74 2e 65 76 65 6e 74 3a 76 69 65 77 22 Data Ascii: //tealium universal tag - utag.112 ut4.0.202412191235, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;u.ev={"view":1,"link":1};u.map={"ga4_account":"measurement_id","ut.event:view"
2025-03-18 16:51:58 UTC	8136	IN	Data Raw: 0a 69 66 28 74 6f 42 6f 6f 6c 65 61 6e 28 75 2e 64 61 74 61 2e 73 65 6e 64 5f 70 61 67 65 5f 76 69 65 77 29 26 26 28 75 74 61 67 5f 65 76 65 6e 74 3d 3d 3d 27 76 69 65 77 27 7c 7c 21 75 2e 69 6e 69 74 69 61 6c 69 7a 65 64 29 29 7b 75 2e 64 61 74 61 2e 65 76 65 6e 74 5f 71 75 65 75 65 2e 75 6e 73 68 69 66 74 28 22 70 61 67 65 5f 76 69 65 77 22 29 3b 7d 0a 75 2e 64 61 74 61 2e 63 6f 6e 66 69 67 2e 73 65 6e 64 5f 70 61 67 65 5f 76 69 65 77 3d 66 61 6c 73 65 3b 66 6f 72 28 69 3d 30 3b 69 3c 75 2e 64 61 74 61 2e 6d 65 61 73 75 72 65 6d 65 6e 74 5f 69 64 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 69 66 28 21 2f 5e 5b 61 2d 7a 41 2d 5a 5d 7b 31 7d 2d 7c 5e 5b 61 2d 7a 41 2d 5a 5d 7b 32 7d 2d 2f 2e 74 65 73 74 28 75 2e 64 61 74 61 2e 6d 65 61 73 75 72 65 6d 65 6e 74 Data Ascii: if(toBoolean(u.data.send_page_view)&&(utag_event==='view'\|\|!u.initialized)){u.data.event_queue.unshift("page_view");}u.data.config.send_page_view=false;for(i=0;i<u.data.measurement_id.length;i++){if(!/^[a-zA-Z]{1}-\|^[a-zA-Z]{2}-/.test(u.data.measurement

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:51:59 UTC	624	OUT	GET /utag/tiqapp/utag.v.js?a=lfg/mlp/202412191235&cb=1742316717746 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.mylincolnportal.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 16:51:59 UTC	584	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2 Connection: close Last-Modified: Sat, 11 Mar 2023 06:57:46 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 2XUX04X5QEw0.xFya64khU._sHTRl_Pz Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 18 Mar 2025 16:49:07 GMT ETag: "7bc0ee636b3b83484fc3b9348863bd22" X-Cache: Hit from cloudfront Via: 1.1 e1af02661708034e962bd39b357a50aa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: YS7qvSaT2rLjSzQ4oldXssjAXTaiukimuUFXc8bttaJC9uxSo-QLiw== Age: 218 Cache-Control: max-age=300
2025-03-18 16:51:59 UTC	2	IN	Data Raw: 2f 2f Data Ascii: //

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:51:59 UTC	731	OUT	POST /lfg/main/2/i.gif HTTP/1.1 Host: datacloud.tealiumiq.com Connection: keep-alive Content-Length: 3567 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryjaAiKOgBJLBpfZSl sec-ch-ua-mobile: ?0 Accept: / Origin: https://www.mylincolnportal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://www.mylincolnportal.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 16:51:59 UTC	3567	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6a 61 41 69 4b 4f 67 42 4a 4c 42 70 66 5a 53 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 64 61 74 61 22 0d 0a 0d 0a 7b 22 6c 6f 61 64 65 72 2e 63 66 67 22 3a 7b 22 31 30 22 3a 7b 22 6c 6f 61 64 22 3a 34 2c 22 73 65 6e 64 22 3a 31 2c 22 76 22 3a 32 30 32 34 30 32 31 33 31 34 32 36 2c 22 77 61 69 74 22 3a 31 2c 22 74 69 64 22 3a 32 30 30 36 34 2c 22 65 78 65 63 75 74 65 64 22 3a 31 7d 2c 22 37 37 22 3a 7b 22 6c 6f 61 64 22 3a 30 2c 22 73 65 6e 64 22 3a 31 2c 22 76 22 3a 32 30 32 32 31 32 32 32 31 35 34 37 2c 22 77 61 69 74 22 3a 31 2c 22 74 69 64 22 3a 31 37 30 30 33 2c 22 65 78 65 63 75 74 65 64 22 3a 30 7d Data Ascii: ------WebKitFormBoundaryjaAiKOgBJLBpfZSlContent-Disposition: form-data; name="data"{"loader.cfg":{"10":{"load":4,"send":1,"v":202402131426,"wait":1,"tid":20064,"executed":1},"77":{"load":0,"send":1,"v":202212221547,"wait":1,"tid":17003,"executed":0}
2025-03-18 16:51:59 UTC	1015	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 16:51:59 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-acc: lfg:main:2:datacloud X-did: 0195aa2b2dde0012ae4755bd8e5b0506f003e06700918 X-Region: eu-central-1 Access-Control-Allow-Origin: https://www.mylincolnportal.com X-ServerID: uconnect_uconnect-1896a57b-98f3-4abe-baf5-44b1d10d2096 Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Access-Control-Expose-Headers: X-Region Cache-Control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0 X-tid: 0195aa2b2dde0012ae4755bd8e5b0506f003e06700918 Access-Control-Allow-Credentials: true X-ULVer: 4b7fbb65d8adb553fb397fbe373804dd40a64560-SNAPSHOT Vary: Origin Expires: Tue, 18 Mar 2025 16:51:59 GMT X-UUID: 964f12d9-15d7-497a-9fc6-9c32adb57dff Set-Cookie: TAPID=lfg/main>0195aa2b2dde0012ae4755bd8e5b0506f003e06700918\|; Path=/; Domain=.tealiumiq.com; Expires=Wed, 18-Mar-2026 16:51:59 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=None
2025-03-18 16:51:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:52:00 UTC	587	OUT	GET /nr-spa-1184.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.mylincolnportal.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 16:52:00 UTC	549	IN	HTTP/1.1 200 OK Connection: close Content-Length: 38395 Last-Modified: Wed, 18 Oct 2023 21:30:59 GMT ETag: "6b93dbf34696df852c6d69d1652851de" Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 Content-Type: application/javascript Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Tue, 18 Mar 2025 16:52:00 GMT X-Served-By: cache-nyc-kteb1890020-NYC X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2025-03-18 16:52:00 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 6f 29 7b 69 66 28 21 6e 5b 65 5d 29 7b 69 66 28 21 74 5b 65 5d 29 7b 76 61 72 20 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 5f 5f 6e 72 5f 72 65 71 75 69 72 65 26 26 5f 5f 6e 72 5f 72 65 71 75 69 72 65 3b 69 66 28 21 6f 26 26 61 29 72 65 74 75 72 6e 20 61 28 65 2c 21 30 29 3b 69 66 28 69 29 72 65 74 75 72 6e 20 69 28 65 2c 21 30 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 65 2b 22 27 22 29 7d 76 61 72 20 73 3d 6e 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 74 5b 65 5d 5b 30 5d 2e 63 61 6c 6c 28 73 2e 65 78 70 6f 72 74 73 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 Data Ascii: !function(t,n,e){function r(e,o){if(!n[e]){if(!t[e]){var a="function"==typeof __nr_require&&__nr_require;if(!o&&a)return a(e,!0);if(i)return i(e,!0);throw new Error("Cannot find module '"+e+"'")}var s=n[e]={exports:{}};t[e][0].call(s.exports,function(n){v
2025-03-18 16:52:00 UTC	1378	IN	Data Raw: 69 6f 6e 3d 28 65 7c 7c 22 68 74 74 70 3a 2f 2f 63 75 73 74 6f 6d 2e 74 72 61 6e 73 61 63 74 69 6f 6e 22 29 2b 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 6e 29 7b 76 61 72 20 65 3d 6e 3f 6e 2d 6d 2e 6f 66 66 73 65 74 3a 74 3b 64 2e 73 74 6f 72 65 28 22 63 6d 22 2c 22 66 69 6e 69 73 68 65 64 22 2c 7b 6e 61 6d 65 3a 22 66 69 6e 69 73 68 65 64 22 7d 2c 7b 74 69 6d 65 3a 65 7d 29 2c 6f 28 74 2c 7b 6e 61 6d 65 3a 22 66 69 6e 69 73 68 65 64 22 2c 73 74 61 72 74 3a 65 2b 6d 2e 6f 66 66 73 65 74 2c 6f 72 69 67 69 6e 3a 22 6e 72 22 7d 29 2c 76 28 22 61 70 69 2d 61 64 64 50 61 67 65 41 63 74 69 6f 6e 22 2c 5b 65 2c 22 66 69 6e 69 73 68 65 64 22 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 6e 29 7b 69 66 28 6e 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 Data Ascii: ion=(e\|\|"http://custom.transaction")+n)}function i(t,n){var e=n?n-m.offset:t;d.store("cm","finished",{name:"finished"},{time:e}),o(t,{name:"finished",start:e+m.offset,origin:"nr"}),v("api-addPageAction",[e,"finished"])}function o(t,n){if(n&&"object"==type
2025-03-18 16:52:00 UTC	1378	IN	Data Raw: 77 6e 50 72 6f 70 65 72 74 79 28 22 63 72 65 61 74 65 22 29 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3a 7b 7d 2c 65 3d 30 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 6e 29 7b 76 61 72 20 65 3d 5b 5d 3b 72 65 74 75 72 6e 20 75 28 74 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 69 66 28 21 28 65 2e 6c 65 6e 67 74 68 3e 3d 64 29 29 7b 76 61 72 20 69 2c 6f 3d 35 3b 73 77 69 74 63 68 28 74 3d 6e 28 74 29 2c 74 79 70 65 6f 66 20 72 29 7b 63 61 73 65 22 6f 62 6a 65 63 74 22 3a 72 3f 69 3d 6e 28 63 28 72 29 29 3a 6f 3d 39 3b 62 72 65 61 6b 3b 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 6f 3d 36 2c 69 3d 72 25 31 3f 72 3a 72 2b 22 2e 22 3b 62 72 65 61 6b 3b 63 61 73 65 22 62 6f 6f 6c 65 61 6e 22 3a 6f 3d 72 3f 37 3a 38 3b 62 Data Ascii: wnProperty("create")?Object.create(null):{},e=0;return t}function a(t,n){var e=[];return u(t,function(t,r){if(!(e.length>=d)){var i,o=5;switch(t=n(t),typeof r){case"object":r?i=n(c(r)):o=9;break;case"number":o=6,i=r%1?r:r+".";break;case"boolean":o=r?7:8;b
2025-03-18 16:52:00 UTC	1378	IN	Data Raw: 2c 65 2b 3d 61 2e 6c 65 6e 67 74 68 2c 72 2b 3d 61 3b 65 6c 73 65 20 69 66 28 6f 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 65 2b 3d 39 2c 73 3d 30 3b 73 3c 6f 2e 6c 65 6e 67 74 68 26 26 28 61 3d 69 28 63 28 6f 5b 73 5d 29 29 2c 65 2b 3d 61 2e 6c 65 6e 67 74 68 2c 21 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 26 26 65 3e 3d 6e 29 29 3b 73 2b 2b 29 75 2e 70 75 73 68 28 61 29 3b 72 2b 3d 22 26 22 2b 74 2b 22 3d 25 35 42 22 2b 75 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 25 35 44 22 7d 7d 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 22 26 22 2b 74 2b 22 3d 22 2b 69 28 6e 29 3a 22 22 7d 76 61 72 20 75 3d 74 28 34 31 29 2c 63 3d 74 28 32 32 29 2c Data Ascii: ,e+=a.length,r+=a;else if(o.length){for(e+=9,s=0;s<o.length&&(a=i(c(o[s])),e+=a.length,!("undefined"!=typeof n&&e>=n));s++)u.push(a);r+="&"+t+"=%5B"+u.join(",")+"%5D"}}),r}function s(t,n){return n&&"string"==typeof n?"&"+t+"="+i(n):""}var u=t(41),c=t(22),
2025-03-18 16:52:00 UTC	1378	IN	Data Raw: 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2c 7b 7d 29 2c 6e 61 76 69 67 61 74 69 6f 6e 3a 76 2e 61 64 64 50 4e 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 61 76 69 67 61 74 69 6f 6e 2c 7b 7d 29 7d 3b 69 2e 70 75 73 68 28 67 2e 70 61 72 61 6d 28 22 70 65 72 66 22 2c 78 28 6f 29 29 29 7d 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 70 61 69 6e 74 22 29 3b 61 26 26 61 2e 6c 65 6e 67 74 68 3e 30 26 26 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 21 74 2e Data Ascii: rformance.timing,{}),navigation:v.addPN(window.performance.navigation,{})};i.push(g.param("perf",x(o)))}if(window.performance&&window.performance.getEntriesByType){var a=window.performance.getEntriesByType("paint");a&&a.length>0&&a.forEach(function(t){!t.
2025-03-18 16:52:00 UTC	1378	IN	Data Raw: 20 69 66 28 43 29 61 3d 21 30 2c 6f 3d 79 2e 78 68 72 3b 65 6c 73 65 7b 69 66 28 22 65 76 65 6e 74 73 22 21 3d 3d 74 29 72 65 74 75 72 6e 21 31 3b 6f 3d 79 2e 69 6d 67 7d 7d 76 61 72 20 75 3d 69 3b 61 26 26 22 65 76 65 6e 74 73 22 3d 3d 3d 74 3f 73 3d 65 2e 62 6f 64 79 2e 65 3a 61 3f 73 3d 78 28 65 2e 62 6f 64 79 29 3a 75 3d 69 2b 67 2e 6f 62 6a 28 65 2e 62 6f 64 79 2c 6e 2e 6d 61 78 42 79 74 65 73 29 3b 76 61 72 20 63 3d 6f 28 75 2c 73 29 3b 72 65 74 75 72 6e 20 63 7c 7c 6f 21 3d 3d 79 2e 62 65 61 63 6f 6e 7c 7c 28 63 3d 79 2e 69 6d 67 28 69 2b 67 2e 6f 62 6a 28 65 2e 62 6f 64 79 2c 6e 2e 6d 61 78 42 79 74 65 73 29 29 29 2c 63 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 69 66 28 74 26 26 74 2e 69 6e 66 6f 26 26 74 2e 69 6e 66 6f 2e 65 72 72 6f 72 42 65 Data Ascii: if(C)a=!0,o=y.xhr;else{if("events"!==t)return!1;o=y.img}}var u=i;a&&"events"===t?s=e.body.e:a?s=x(e.body):u=i+g.obj(e.body,n.maxBytes);var c=o(u,s);return c\|\|o!==y.beacon\|\|(c=y.img(i+g.obj(e.body,n.maxBytes))),c}function c(t){if(t&&t.info&&t.info.errorBe
2025-03-18 16:52:00 UTC	1378	IN	Data Raw: 20 6c 74 65 20 49 45 20 38 5d 3e 3c 64 69 76 3e 3c 2f 64 69 76 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 39 5d 3e 3c 64 69 76 3e 3c 2f 64 69 76 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 22 3b 76 61 72 20 69 2c 6f 3d 72 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 64 69 76 22 29 2e 6c 65 6e 67 74 68 3b 69 3d 34 3d 3d 3d 6f 3f 36 3a 33 3d 3d 3d 6f 3f 37 3a 32 3d 3d 3d 6f 3f 38 3a 31 3d 3d 3d 6f 3f 39 3a 30 2c 6e 2e 65 78 70 6f 72 74 73 3d 69 7d 2c 7b 7d 5d 2c 31 31 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 61 2e 73 65 6e 64 46 69 6e 61 6c 28 63 2c 21 31 29 2c 64 2e 63 6f 6e 64 69 74 69 6f 6e 61 6c 6c 79 53 65 74 28 29 7d 76 61 72 20 69 3d 74 Data Ascii: lte IE 8]><div></div><![endif]-->...[if lte IE 9]><div></div><![endif]-->";var i,o=r.getElementsByTagName("div").length;i=4===o?6:3===o?7:2===o?8:1===o?9:0,n.exports=i},{}],11:[function(t,n,e){function r(t){a.sendFinal(c,!1),d.conditionallySet()}var i=t
2025-03-18 16:52:00 UTC	1378	IN	Data Raw: 22 73 22 29 2c 6f 28 74 5b 22 63 22 2b 64 2b 73 5d 2c 65 2c 6e 2c 22 63 65 22 29 2c 6f 28 74 5b 6c 2b 61 5d 2c 65 2c 6e 2c 22 72 71 22 29 2c 6f 28 74 5b 68 2b 61 5d 2c 65 2c 6e 2c 22 72 70 22 29 2c 6f 28 74 5b 68 2b 73 5d 2c 65 2c 6e 2c 22 72 70 65 22 29 2c 6f 28 74 2e 64 6f 6d 4c 6f 61 64 69 6e 67 2c 65 2c 6e 2c 22 64 6c 22 29 2c 6f 28 74 2e 64 6f 6d 49 6e 74 65 72 61 63 74 69 76 65 2c 65 2c 6e 2c 22 64 69 22 29 2c 6f 28 74 5b 6d 2b 61 5d 2c 65 2c 6e 2c 22 64 73 22 29 2c 6f 28 74 5b 6d 2b 73 5d 2c 65 2c 6e 2c 22 64 65 22 29 2c 6f 28 74 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 2c 65 2c 6e 2c 22 64 63 22 29 2c 6f 28 74 5b 70 2b 61 5d 2c 65 2c 6e 2c 22 6c 22 29 2c 6f 28 74 5b 70 2b 73 5d 2c 65 2c 6e 2c 22 6c 65 22 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 Data Ascii: "s"),o(t["c"+d+s],e,n,"ce"),o(t[l+a],e,n,"rq"),o(t[h+a],e,n,"rp"),o(t[h+s],e,n,"rpe"),o(t.domLoading,e,n,"dl"),o(t.domInteractive,e,n,"di"),o(t[m+a],e,n,"ds"),o(t[m+s],e,n,"de"),o(t.domComplete,e,n,"dc"),o(t[p+a],e,n,"l"),o(t[p+s],e,n,"le"),n}function i(t
2025-03-18 16:52:00 UTC	1378	IN	Data Raw: 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 20 22 29 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 30 3d 3d 3d 74 5b 6e 5d 2e 69 6e 64 65 78 4f 66 28 22 4e 52 45 55 4d 3d 22 29 29 7b 66 6f 72 28 76 61 72 20 65 2c 72 2c 69 2c 6f 2c 73 3d 74 5b 6e 5d 2e 73 75 62 73 74 72 69 6e 67 28 22 4e 52 45 55 4d 3d 22 2e 6c 65 6e 67 74 68 29 2e 73 70 6c 69 74 28 22 26 22 29 2c 75 3d 30 3b 75 3c 73 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 30 3d 3d 3d 73 5b 75 5d 2e 69 6e 64 65 78 4f 66 28 22 73 3d 22 29 3f 69 3d 73 5b 75 5d 2e 73 75 62 73 74 72 69 6e 67 28 32 29 3a 30 3d 3d 3d 73 5b 75 5d 2e 69 6e 64 65 78 4f 66 28 22 70 3d 22 29 3f 28 72 3d 73 5b 75 5d Data Ascii: }}function o(){for(var t=document.cookie.split(" "),n=0;n<t.length;n++)if(0===t[n].indexOf("NREUM=")){for(var e,r,i,o,s=t[n].substring("NREUM=".length).split("&"),u=0;u<s.length;u++)0===s[u].indexOf("s=")?i=s[u].substring(2):0===s[u].indexOf("p=")?(r=s[u]
2025-03-18 16:52:00 UTC	1378	IN	Data Raw: 22 3b 76 61 72 20 72 3d 5b 5d 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 77 69 6e 64 6f 77 2e 41 72 72 61 79 7c 7c 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 61 70 70 6c 79 28 65 29 29 7b 66 6f 72 28 76 61 72 20 73 3d 65 2e 6c 65 6e 67 74 68 2c 75 3d 30 3b 75 3c 73 3b 75 2b 3d 31 29 72 5b 75 5d 3d 6f 28 75 2c 65 29 7c 7c 22 6e 75 6c 6c 22 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 3f 22 5b 5d 22 3a 22 5b 22 2b 72 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 5d 22 7d 72 65 74 75 72 6e 20 61 28 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 6f 28 74 2c 65 29 3b 6e 26 26 72 2e 70 75 73 68 28 69 28 74 29 2b 22 3a 22 2b 6e 29 7d 29 2c 30 3d Data Ascii: ";var r=[];if(e instanceof window.Array\|\|"[object Array]"===Object.prototype.toString.apply(e)){for(var s=e.length,u=0;u<s;u+=1)r[u]=o(u,e)\|\|"null";return 0===r.length?"[]":"["+r.join(",")+"]"}return a(e,function(t){var n=o(t,e);n&&r.push(i(t)+":"+n)}),0=

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:52:00 UTC	474	OUT	GET /lfg/main/2/i.gif HTTP/1.1 Host: datacloud.tealiumiq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: TAPID=lfg/main>0195aa2b2dde0012ae4755bd8e5b0506f003e06700918\|
2025-03-18 16:52:00 UTC	818	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 16:52:00 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-acc: lfg:main:2:datacloud X-Region: eu-central-1 X-ServerID: uconnect_uconnect-6ecebaa2-df2c-45eb-a876-6605f0dd01ce Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Cache-Control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0 X-tid: 0195aa2b2dde0012ae4755bd8e5b0506f003e06700918 X-ULVer: 4b7fbb65d8adb553fb397fbe373804dd40a64560-SNAPSHOT Vary: Origin Expires: Tue, 18 Mar 2025 16:52:00 GMT X-UUID: ab366945-33da-4679-9b45-10830240f8b1 Set-Cookie: TAPID=lfg/main>0195aa2b2dde0012ae4755bd8e5b0506f003e06700918\|; Path=/; Domain=.tealiumiq.com; Expires=Wed, 18-Mar-2026 16:52:00 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=None
2025-03-18 16:52:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:52:00 UTC	1083	OUT	GET /favicon.ico HTTP/1.1 Host: www.mylincolnportal.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mylincolnportal.com/customer/public/migration-help Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=56c7fcdc-0924-4214-bcd4-c6bcdfacbc66\|NEW; notice_behavior=implied,eu; utag_main=v_id:0195aa2b2dde0012ae4755bd8e5b0506f003e06700918$_sn:1$_se:1%3Bexp-session$_ss:1%3Bexp-session$_st:1742318511392%3Bexp-session$ses_id:1742316711392%3Bexp-session$_pn:1%3Bexp-session$dc_visit:1$dc_event:1%3Bexp-session$dc_region:eu-central-1%3Bexp-session; _ga_KBJZRR6MFS=GS1.1.1742316719.1.0.1742316719.0.0.0; _ga=GA1.1.917394720.1742316719
2025-03-18 16:52:00 UTC	459	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 16:52:00 GMT Content-Type: image/x-icon Content-Length: 15086 Connection: close Last-Modified: Sun, 26 Jan 2025 14:04:46 GMT Accept-Ranges: bytes Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY X-XSS-Protection: 0 Referrer-Policy: no-referrer
2025-03-18 16:52:00 UTC	8192	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 00 65 0d 30 00 65 36 30 00 65 6e 30 00 65 a3 2f 00 64 cc 2e 00 63 e7 30 00 65 f6 30 00 65 fd 30 00 65 fd 30 00 65 f6 30 00 65 e7 30 00 65 cc 30 00 65 a3 30 00 65 6e 30 00 65 36 30 00 65 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 00 %6 % h6(0` $0e0e60en0e/d.c0e0e0e0e0e0e0e0en0e60e
2025-03-18 16:52:00 UTC	6894	IN	Data Raw: 00 00 00 00 00 00 30 00 65 39 30 00 65 e5 30 00 65 ff 30 00 65 ff 30 00 65 ff 30 00 65 ff 30 00 65 ff 30 00 65 ff 2e 00 64 ff 2d 00 63 ff 31 02 66 ff 32 03 67 ff 2e 00 63 ff 2d 00 63 ff 2f 00 65 ff 30 00 65 ff 30 00 65 ff 30 00 65 ff 30 00 65 ff 30 00 65 ff 2f 00 64 ff 2f 00 64 ff 30 01 66 ff 26 1f a1 ff 19 49 f3 ff 17 50 ff ff 17 4f ff ff 17 4f ff ff 17 4f ff e3 17 4f ff 5d 17 4f ff 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 00 65 67 30 00 65 f3 30 00 65 ff 30 00 65 ff 30 00 65 ff 30 00 65 ff 30 00 65 ff 30 00 65 ff 30 00 65 ff 30 00 65 ff 30 00 65 ff 30 00 65 ff 30 00 65 ff 30 Data Ascii: 0e90e0e0e0e0e0e0e.d-c1f2g.c-c/e0e0e0e0e0e/d/d0f&IPOOOO]O0eg0e0e0e0e0e0e0e0e0e0e0e0e0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:52:00 UTC	1096	OUT	GET /1/21d62ec129?a=373156804&sa=1&v=1184.ab39b52&t=Unnamed%20Transaction&rst=11070&ck=1&ref=https://www.mylincolnportal.com/customer/public/migration-help&be=1093&fe=10334&dc=7737&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1742316708833,%22n%22:0,%22f%22:7,%22dn%22:51,%22dne%22:71,%22c%22:71,%22s%22:72,%22ce%22:684,%22rq%22:684,%22rp%22:991,%22rpe%22:1093,%22dl%22:995,%22di%22:3107,%22ds%22:7737,%22de%22:7738,%22dc%22:10333,%22l%22:10334,%22le%22:10335%7D,%22navigation%22:%7B%7D%7D&fp=4892&fcp=4892&jsonp=NREUM.setToken HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.mylincolnportal.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 16:52:01 UTC	521	IN	HTTP/1.1 200 Connection: close Content-Length: 87 date: Tue, 18 Mar 2025 16:52:00 GMT content-type: text/javascript nr-rate-limited: allowed access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: Date timing-allow-origin: * set-cookie: JSESSIONID=64457da1f9c17d71; Path=/; Domain=.nr-data.net; Secure; SameSite=None cross-origin-resource-policy: cross-origin x-served-by: cache-ewr-kewr1740075-EWR
2025-03-18 16:52:01 UTC	87	IN	Data Raw: 4e 52 45 55 4d 2e 73 65 74 54 6f 6b 65 6e 28 7b 27 73 74 6e 27 3a 30 2c 27 65 72 72 27 3a 31 2c 27 69 6e 73 27 3a 31 2c 27 73 70 61 27 3a 31 2c 27 73 72 27 3a 30 2c 27 73 72 73 27 3a 30 2c 27 73 74 27 3a 31 2c 27 73 74 73 27 3a 30 2c 27 6c 6f 67 27 3a 30 7d 29 Data Ascii: NREUM.setToken({'stn':0,'err':1,'ins':1,'spa':1,'sr':0,'srs':0,'st':1,'sts':0,'log':0})

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:52:01 UTC	842	OUT	POST /events/1/21d62ec129?a=373156804&sa=1&v=1184.ab39b52&t=Unnamed%20Transaction&rst=11734&ck=1&ref=https://www.mylincolnportal.com/customer/public/migration-help HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 442 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" content-type: text/plain sec-ch-ua-mobile: ?0 Accept: / Origin: https://www.mylincolnportal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://www.mylincolnportal.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=64457da1f9c17d71
2025-03-18 16:52:01 UTC	442	OUT	Data Raw: 62 65 6c 2e 37 3b 31 2c 33 2c 2c 38 6e 72 2c 37 7a 65 2c 31 63 2c 27 69 6e 69 74 69 61 6c 50 61 67 65 4c 6f 61 64 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 79 6c 69 6e 63 6f 6c 6e 70 6f 72 74 61 6c 2e 63 6f 6d 2f 63 75 73 74 6f 6d 65 72 2f 70 75 62 6c 69 63 2f 6d 69 67 72 61 74 69 6f 6e 2d 68 65 6c 70 2c 31 2c 31 2c 2c 2c 21 21 21 21 27 31 63 36 36 34 64 65 61 2d 39 62 38 30 2d 34 61 65 37 2d 62 34 31 36 2d 38 31 66 30 31 32 34 39 66 30 63 63 2c 27 31 2c 33 72 77 2c 33 72 77 3b 32 2c 2c 36 30 65 2c 6a 79 2c 31 2c 32 2c 27 47 45 54 2c 35 6b 2c 27 77 77 77 2e 6d 79 6c 69 6e 63 6f 6c 6e 70 6f 72 74 61 6c 2e 63 6f 6d 3a 34 34 33 2c 27 2f 70 6f 72 74 61 6c 2d 73 74 61 74 75 73 2c 2c 31 72 2c 2c 27 32 2c 21 21 21 3b 32 2c 2c 36 76 76 2c 79 6c 2c 2c 31 2c 27 Data Ascii: bel.7;1,3,,8nr,7ze,1c,'initialPageLoad,'https://www.mylincolnportal.com/customer/public/migration-help,1,1,,,!!!!'1c664dea-9b80-4ae7-b416-81f01249f0cc,'1,3rw,3rw;2,,60e,jy,1,2,'GET,5k,'www.mylincolnportal.com:443,'/portal-status,,1r,,'2,!!!;2,,6vv,yl,,1,'
2025-03-18 16:52:01 UTC	347	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 18 Mar 2025 16:52:01 GMT content-type: image/gif nr-rate-limited: allowed access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.mylincolnportal.com x-served-by: cache-ewr-kewr1740079-EWR
2025-03-18 16:52:01 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:52:02 UTC	573	OUT	GET /events/1/21d62ec129?a=373156804&sa=1&v=1184.ab39b52&t=Unnamed%20Transaction&rst=11734&ck=1&ref=https://www.mylincolnportal.com/customer/public/migration-help HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=64457da1f9c17d71
2025-03-18 16:52:02 UTC	317	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 18 Mar 2025 16:52:02 GMT content-type: image/gif nr-rate-limited: allowed access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: * x-served-by: cache-ewr-kewr1740030-EWR
2025-03-18 16:52:02 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Timestamp	Bytes transferred	Direction	Data
2025-03-18 16:52:09 UTC	849	OUT	GET /bannermsg?action=accepts&domain=lincolnfinancialgroup.com&behavior=implied&country=us&language=en&rand=0.005076862849370034&session=56c7fcdc-0924-4214-bcd4-c6bcdfacbc66&userType=NEW&referer=https://www.mylincolnportal.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.mylincolnportal.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 16:52:10 UTC	541	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 18 Mar 2025 16:52:10 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 0121ceb2efadb6db52d122a8b6b52f90.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: LyKzXuS2ciQnHiXDyldYkEOYxMzQnqTlgoAPdnlsc_0w7J5rvN9NBw== Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin
2025-03-18 16:52:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;